How to Share a File Externally in SharePoint
Sharing files outside your organisation is one of the easiest things to get wrong. Done well, it’s controlled, traceable, and time-bound. Done badly, it leaks confidential content and creates audit nightmares.
What it is
External sharing means giving access to a file or folder to someone outside your organisation — a client, a contractor, a partner, a regulator. SharePoint and OneDrive support this natively, but the way you do it matters a lot. The wrong choice creates risk that lasts years; the right choice is barely more effort and protects everyone involved.
The most common external sharing mistake is also the most preventable: emailing the file as an attachment. Once it’s gone, you’ve lost control of where it ends up, who’s editing what, and which version is current. The right alternative — sharing a link from SharePoint or OneDrive — keeps the file in your environment, lets you change permissions later, and gives you a clear record of who has access.
Modern external sharing in Microsoft 365 supports specific people (recommended), expiry dates, view-only access, download blocking, and password protection. Use them. They’re not enterprise-grade overkill — they’re the basics of professional file handling.
Why it matters
External sharing is where most data breaches actually happen — not through hacking, but through someone forwarding a link to the wrong person, or attaching a file that ends up in a personal inbox.
- Email attachments are uncontrollable. Once it leaves your inbox, you have no idea where it goes, who reads it, or how many copies exist.
- Persistent links are forgettable. The link you sent a contractor in 2024 is still working in 2026 unless someone removes it. Set expiry dates from day one.
- External users behave differently. They forward emails. They share with colleagues. They save copies locally. Plan for that.
The link, never the attachment
If you remember nothing else, remember this: when you need to share a file with someone outside your organisation, share the link from SharePoint or OneDrive. Don’t attach. Attachments are dead copies that drift out of sync, lose access controls, and end up in unexpected places. Links stay in your environment, where you can change them, expire them, or revoke them at any time.
When to use this
- When you’re sharing files with a client, contractor, or external partner.
- When you’ve been emailing attachments back and forth and want to stop the version chaos.
- When the content is sensitive and you need a record of who has access.
- When you want time-bound access — for a specific project or review period.
How to do it
- Make sure the file is stored in SharePoint or OneDrive (not on a desktop or shared drive).
- Select the file and click Share.
- Open Link settings — this is where the real control lives.
- Choose Specific people (the safest option for external sharing).
- Set permission to View unless they truly need to edit.
- Add an expiry date if available (most external sharing should be time-bound).
- Optionally disable Allow download for sensitive content.
- Enter the external email address(es) and send.
- When the work is done, return to Manage access and remove the link.
Best practices
- Default to ‘Specific people’ for external sharing. Anyone-with-the-link forwards. Specific people don’t.
- Always set expiry on external links. External access shouldn’t outlive the project.
- Use view-only by default. Edit access is for genuine collaborators, not reviewers.
- Keep external work in a controlled team site. Don’t share from someone’s personal OneDrive — when they leave, the link breaks.
- Audit external access quarterly. Old contractor still has access? Time to clean up.
Common mistakes
- Emailing the file as an attachment. You’ve now lost control. Send a link instead.
- Using ‘Anyone with the link’ for external sharing. Anyone means anyone. The link will end up forwarded, copied, and shared with people you didn’t intend.
- Granting edit access for a one-off review. Reviewers don’t need edit. Use comments instead.
- Not removing access when work is done. Old links live forever. Add a closing step to every external project: revoke access.
The Sharing Handbook gives you the Traffic Light System for every SharePoint sharing decision. Real screenshots of the Link Settings dialog, end-user focused, no admin access required.
Get the Sharing Handbook — $27 →FAQ
How do I share a SharePoint file with someone outside my organisation?
In SharePoint or OneDrive, select the file and click Share. Open Link settings, choose Specific people, set permission to View unless they need to edit, and add an expiry date. Enter the recipient’s email and send. The link only works for that email address — far safer than ‘Anyone with the link’.
Is it safe to share SharePoint files externally?
Yes, when done correctly. SharePoint’s external sharing is more secure than email attachments because the file stays in your environment — you can change permissions later, expire access, and audit who’s accessed it. The risk isn’t external sharing itself, it’s choosing ‘Anyone with the link’ instead of ‘Specific people’ and never setting an expiry date.
Can I see who I’ve shared a SharePoint file with externally?
Yes. Click Manage access on any file to see every internal and external person who has access, by which link, with what permission level. The pane shows expiry dates where set. Reviewing this monthly catches forgotten-about external links before they become security issues.
What happens when someone leaves the external organisation?
Their access doesn’t automatically disappear unless you set an expiry date or actively revoke it. This is one of the biggest holes in most organisations’ sharing hygiene. Build a quarterly review of external access via the Manage Access pane, or use Power Automate to flag external links older than 90 days.