Google Drive has implemented a security update to enhance shared file protection. This update addresses files created with the legacy address-generation method, predating 2018. The primary goal is to make file sharing more secure by adding a resource key to the URL, making it more challenging for malicious actors to discover sensitive information.
Admin Console Setting: Security Update for Files
The Security update for files Admin console setting controls whether the security update to Drive is applied and, if so, whether users can override the update on specific files.
Setting Location: Apps > Google Workspace > Drive and Docs > Sharing settings > Security update for files
The security update is automatically applied if you do not select a value for the setting. After that, users cannot remove or apply it to their files.
Note: Both Google and CDW Amplified for Education recommend not using the Remove Security update from all impacted files option.
Which files are Impacted
While it is not possible to generate a list of the file links that will be updated and where they are shared, you can narrow down your volume by considering the following.
Files impacted
-
Files shared by creating and sending a Google Drive link prior to 2018
-
Users who accessed a file using the old Google Drive link before this update can still access the file post update
-
Users who did not access a file using the old Google Drive link before the update can still use the link, but will receive a request access message
Files not impacted
-
Google Docs, Sheets, Slides, and Forms
-
Files shared by inviting others via email
Files shared by creating and sending a Google Drive link before 2018
Users accessing a file using the old Google Drive link before this update can still access the post-update. However, users who did not access a file using the old Google Drive link before the update will receive a request access message.
Communicating the change to staff
It is important to let staff know that once this update takes effect, they may see the request access message when accessing a Google Drive link. They may also start receiving requests to share emails if they are the owner of a file with an updated file link.
Visit this link to learn more about deciding how to apply the link-sharing security update to Drive.
| Document Version | Date | Description of Change |
| 1.0 | 12/22/2023 | Article updated and verified |