We recommend the following best practices for shared links in Box:

1. For how to create a shared link, please see this article from Box
2. Unless there is a strong need to customize the link, use the default Box shared link. They are more secure.
   
   1. If you must use a customized link: beginning in mid-March 2019, Box requires that all custom links be at least 12 characters in length. 
3. Regardless of whether it is a default or custom shared link, if you’re sharing any data that shouldn’t be public and you need to set the access level to people with the link, set a password on your link.
   
   1. Passwords can only be set on a link when the access level is set to - People with the link. This is the most open access for the link. If using this type of link access, click the Link Settings to set a password for the shared link
      
      
4. When you create a shared link of any kind, take the time to think about how long the link will be necessary. If you can determine a time limit, set an expiration date. Use the same Link Settings link above to set an expiration date for your link - it's the Link Expiration setting. Expiration dates will save you time and worry later. We recommend setting expiration dates for Shared Links.