New security features that make sharing on safedrop even safer

Share on facebook
Share on twitter
Share on linkedin
Share on email

At safedrop, we’re always balancing two things: keeping your data safe and making sure security doesn’t get in your way. We’re diving into the newest safedrop security features, built to meet today’s compliance demands, reduce admin effort, and give professional firms rock-solid protection.

Whether you’re in legal, financial services, healthcare, or consultancy, these tools are designed to protect sensitive files while keeping things simple for everyone involved.

MFA, your way — Multi-Factor Authentication on safedrop

Multi-Factor Authentication (MFA) is fast becoming a must-have for compliance, and many cyber insurers now require it. safedrop now gives you full control over how MFA is used.

When MFA is on, your users can choose :

  • SMS verification codes sent to a user’s phone
  • Time-based One-Time Passwords (TOTP) via apps like Google Authenticator, Authy, or Microsoft Authenticator

Your admin decides when MFA kicks in:

  • Only for users logging in with email and password (ideal if your firm uses SSO through Azure or Google)
  • Always enforced for maximum security, no matter how users log in

You can also reset or update user MFA settings from the Admin Panel in just a few clicks.

It’s a smart way to reduce risk without adding complexity.

Self-provisioning: let team Members sign up automatically

Manual user setup is a pain and a blocker when teams grow fast. With safedrop’s new auto-provisioning, you can:

  • Add one or more company domains (e.g. @lawfirm.com)
  • Let users sign up themselves, no IT request needed
  • Get notified whenever someone joins

All new users are free for 2 weeks, and you can remove them anytime. This is perfect for fast-moving teams and reduces setup friction.

Pro tip: Link to your company’s safedrop portal in internal tools or onboarding docs to let users get started fast.

New: Require an Account for Maximum File Access Security

Sometimes you need more than a magic link. For sensitive or recurring client exchanges, safedrop now lets you require recipients to have a safedrop account.

When enabled:

  • The recipient must sign up and complete MFA
  • They can’t access your safedrop until they’ve authenticated

This is the most secure way to share and it helps you meet strict data handling or audit requirements.

As a bonus, they get a safedrop inbox, which contains all the messages they’ve received.

It’s secure, two-way file sharing made simple.

Why This Matters in 2025

Cybersecurity expectations are climbing. From ISO 27001 audits to client contract clauses and insurance checklists, firms are being asked to prove they’ve got real controls in place.

These safedrop updates help:

  • Demonstrate strong authentication practices
  • Avoid unnecessary IT delays
  • Protect sensitive files, fast

Get Started

We’ve created easy guides to help your team hit the ground running:

Need help rolling it out? Our support crew is standing by — with real people, fast answers, and no scripts.

Secure sharing shouldn’t be hard. With safedrop, it isn’t.