External Recipient Access

External recipients currently open a share through confirmed-email PIN verification or an explicitly created anyone-with-link share. They do not register guest passkeys.

Shares can be expired, revoked, or reissued. Revocation prevents future access through that share; it cannot recall a file the recipient already downloaded or copied.

Granular section permissions and E2EE parity for current external-recipient sharing are not implemented in the current product.