How to Share Files and Folders from OneDrive in Windows 10 | Dramel Notes

With OneDrive, it’s easy to share files and folders securely and easily with other people. They won’t need to install any special applications or sign up for a new account. In fact, they can use any web browser to get to the files you share with them. And you have a complete control in your hand—your files will only be shared with the people you choose. In this article, we’ll show you how to share files and folders from your OneDrive, and different permissions you might want to know about before sharing.

Share a File or Folder from the Desktop

In Windows 8.1, OneDrive was integrated into the operating system through an app that you couldn’t uninstall, and settings were easily accessible from PC settings. Through the modern app, users were able to upload their files and folders easily, and even share them without having to use the web interface of OneDrive all the time. OneDrive for Windows 10 brings better integration with the File Explorer. You’re just a click away to share a link of file or folder.

Sharing a file as a link has many advantages, particularly when sending them through email. Email can be rejected by servers when attachments are too large, and even if a large email makes it to your recipient, the recipient might not be happy for having big attachment in their mailbox. OneDrive makes it easy to share a link to a file that can be sent by email, Facebook, or as a text message.

Open OneDrive in File Explorer and locate the file or folder you want to share. Right-click the file or folder to reveal the context menu and select “Share a OneDrive Link”.

After a few seconds a notification will appear letting you know that a link has been prepared.

Open Mail client and enter the email address of the recipient of the file. Right-click and choose “Paste” in the body of the email message to paste the shared OneDrive Link. Upon receipt of the message, the recipient simply has to click the link to have access to your shared file.

Even though this link grants access to only the document or folder it was generated for, there is nothing to identify who used the link, and it could be shared with anyone. If you want a greater control, you might want to share from the web interface, which will allow you to share with specific email addresses and grant limited access to the file.

Share a File or Folder from OneDrive.com

Open OneDrive in File Explorer and locate the file or folder you want to share. Right-click the file or folder to reveal the context menu and select “More OneDrive sharing options”.

Once you click this option, your default web browser will open OneDrive to the sharing options of the particular shared folder. Then choose any one from the following share options.

Invite People

Choose this option if you want to give specific individuals or group permissions to an item. This lets you remove permission for specific individuals or groups later if you need to. In the “To” box, enter email addresses or contact names from the list. Add a note to recipients if you want. To change the permission level, tap or click “Recipients can only view” or “Recipients can edit”.

• If you choose “Recipients can only view”, then recipients you invite can view, download or copy the files you share.
• If you choose “Recipients can edit”, then recipients can use Office Online to edit office documents without signing in. To make other changes (like adding or deleting files in a folder), recipients need to sign in with a Microsoft account.
• If you pick “Recipients can edit” and a recipient forwards the message, anyone who receives it will also be able to edit the item you’re sharing. People with edit permissions can also invite others to have edit permissions to the item. This can be a security concern for some users. However, you can always go back to the “Share” settings to remove anyone you do not want to access the shared folder.

If you always want recipients to sign in with a Microsoft account (to even view the item you’re sharing), choose “Recipients need to sign in with a Microsoft account”. This helps prevent other people from accessing the shared item if a recipient forwards your message. Tap or click “Share” to save the permission settings and send a message with a link to the item. If you share an item with people who don’t have a Microsoft account, they can create one for free.

Get Link

Choose this option to share items with lots of people you might not even know personally. You can use these links to post to Facebook, LinkedIn, email, or text message. Anyone who gets the link can view, copy, and download the item. The recipients can even forward the message. Choose the type of link you want. The permissions for the item are automatically updated when you create the link.

• View only — When you share an item with this type of link, then recipients can view, copy, or download the items without signing in. They can also forward the link to other people.
• Edit — When you share an item with this type of link, the recipients can edit specific files, and can add, copy, move, rename, or even delete files in a shared folder. Recipients can forward the link, change the list of people sharing the files or folder, and even change permissions for their recipients.

Finally tap or click “Create Link”.

To post the link on a social network site, tap or click the icon for the social network. If you want to include the link in a text message, or in a printed document then you might want to shorten the link. Tap or click “Shorten link” to make the URL shorter.

Stop Sharing File or a Folder

You cannot stop sharing or control permissions through a desktop. You have to do it through the OneDrive website. To see all the items you have shared, tap or click “Shared” in the left pane, and then tap or click “Shared by me”.

If you are the owner of the item or have edit permissions then you can stop sharing an item or change the permissions others have to it. Select the checkbox of the shared item, and then tap or click “Share” on the bar at the top of the page.

Under “Shared with”, select the permissions you want to change. You can switch the permissions between editing and only viewing, and stop sharing through any links you created.

Concluding this article, it’s quite easy share file and folder. And you have a complete control in your hand—your files will only be shared with the people you choose. Just be extra cautious with the permissions.

[Read more]

Why You Can’t “Securely Delete” a File, and What to Do Instead | Dramel Notes

Some utilities have a “secure delete” option that promises to securely erase a file from your hard drive, removing all traces of it. Older versions of Mac OS X have a “Secure Empty Trash” option that tries to do something similar. Apple removed this feature recently because it just doesn’t work reliably on modern drives.

The problem with “secure delete” and “secure empty trash” is that it provides a false sense of security. Rather than relying on these sorts of bandaid file-deletion solutions, you should rely on full-disk encryption. On a fully encrypted disk, both deleted and undeleted files are protected.

Why “Secure Delete” Options Were Created

Traditionally, deleting a file from a mechanical hard drive didn’t actually delete that file’s contents. The operating system would mark the file as deleted, and the data would eventually be overwritten. But that file’s data was still sitting on the hard drive, and file-recovery tools could scan a hard disk for deleted files and recover them. This is still possible on USB flash drives and SD cards, too.

If you have sensitive data — for example, business documents, financial information, or your tax returns — you might worry about someone recovering them from a hard drive or removable storage device.

How Secure File Deletion Tools Work

“Secure delete” utilities attempt to solve this problem by not just deleting a file, but overwriting the data with either zeros or random data. This should, the theory goes, make it impossible for someone to recover the deleted file.

This is sort of like wiping a drive. But, when you wipe a drive, the enter drive is overwritten with junk data. When you securely delete a file, the tool attempts to overwrite only that file’s current location with junk data.

Tools like this are available all over the place. The popular CCleaner utility contains a “secure delete” option. Microsoft offers an “sdelete” command for download as part of the SysInternals suite of utilities. Older versions of Mac OS X offered “Secure Empty Trash”, and Mac OS X still offers an included “srm” command for securely deleting files.

Why They Don’t Work Reliably

The first problem with these tools is that they’ll only attempt to overwrite the file in its current location. The operating system may have made backup copies of this file in a number of different places. You may “securely delete” a financial document, but older versions of it may still be stored on disk as part of your operating system’s previous versions feature or other caches.

But, let’s say you can solve that problem. It’s possible. Unfortunately, there’s a bigger problem with modern drives.

With modern solid-state drives, the drive’s firmware scatters a file’s data across the drive. Deleting a file will result in a “TRIM” command being sent, and the SSD may eventually remove the data during garbage collection. A secure delete tool can tell an SSD to overwrite a file with junk data, but the SSD controls where that junk data is written to. The file will appear to be deleted, but its data may still be lurking around somewhere on the drive. Secure delete tools just don’t work reliably with solid-state drives. (The conventional wisdom is that, with TRIM enabled, the SSD will automatically delete its data when you delete the file. This isn’t necessarily true, and it’s more complicated than that.)

Even modern mechanical drives aren’t guaranteed to work properly with secure file deletion tools thanks to file-caching technology. Drives try to be “smart”, and there’s not always a way to ensure all bits of a file were overwritten instead of being scattered over the drive.

You shouldn’t try to “securely delete” a file. If you have sensitive data you want to protect, there’s no guarantee it will be erased and made unrecoverable.

What to Do Instead

Rather than using secure-file-deletion tools, you should just enable file-drive encryption. Windows 10 has Device Encryption enabled on many new PCs, and Professional versions of Windows also offer BitLocker. Mac OS X offers FileVault encryption, Linux offers similar encryption tools, and Chrome OS is encrypted by default.

When you use full-drive encryption, you don’t have to worry about someone getting access to your drive and scanning it for deleted files. They won’t have the encryption key, so even the bits of deleted files will be incomprehensible to them. Even if bits of the deleted files are left on the drive, they’ll be encrypted and just look like random nonsense unless someone has the encryption key.

Even if you have an unencrypted drive that contains sensitive files you want to get rid of, and you’re about to dispose of the drive, you’re better off wiping the entire drive rather than attempting to wipe just the sensitive files. If it’s very sensitive, you’re better off destroying the drive entirely.

---

As long as you use encryption, your files should be protected. Assuming your computer is powered down and the attacker doesn’t know your encryption key, they won’t be able to access your files — including the deleted ones. If you have sensitive data, just encrypt your drive and delete files normally rather than attempting to rely on secure-deletion tools. They might work in some cases, but can often offer a false sense of security. Secure file deletion just doesn’t work reliably with modern hard drives.

[Read more]