Prototype-Only Link: Prevent Client Access to Working Files

Hi guys. When I make progress on my design file, I usually create a prototype and share the link with clients so they can experience the look and feel in real time. However, I recently discovered that clients can somehow access my actual working file through the prototype link. :expressionless:

Screenshot 2024-09-13 at 15.10.40

I want to share a prototype link that only shows the prototype, without granting access to my working file. Is that possible? I mean, it should be.

Currently, clients need to request view permissions for the prototype, which is fine, but those permissions should apply strictly to the prototype link. After granting view permission, I noticed they can also access my working file, exposing all pages and work-in-progress areas. :scream::exploding_head:

Am I missing something about sharing a prototype-only link, or is this a serious issue? If thatā€™s the caseā—ļø, Figma definitely needs an option for a prototype-only link. If I want clients to access my working file, I can do this by sharing the file link separately. If both links serve the same purpose, why does Figma refer to them differently?

(Yes, Iā€™m aware of the workaround of creating a new file for the final presentation, but is that really the only solution?)

Hey @Serkan_Zararsiz, thanks for reaching out and sorry for the delayed reply!

Can you ensure that your share settings in Figma are set to Who can access > Only invited people and ensure that Viewers can copy, share, and export from this file is unchecked?

After that, go into Presentation mode to create a new Share this prototype link:

Keep in mind that prototype only links will allow both existing editors and viewers to see the option to Open in Editor, but Viewers can only view the file and will be directed to request edit access.

I received some attention from the Figma support team, and the result is:

The issue resulted from a restriction set at the Organization level, where public link sharing is banned.
Due to the Organizationā€™s settings, the user will need to invite the external people to their prototypes as viewers and ensure they are not invited to the main file to ensure they can only access the prototype.

Sharing the link to clients will allow them to request access to the whole file and not just the prototype link. The fact that public links are banned in their Organization is what is causing them not to be able to share public links with their the external users.

The way around this is to invite the external user to the Prototype (not the main file) so they can only access the prototype.