Password-protect an envelope

Useful when the document is sensitive enough that you want a second factor beyond the magic link. Examples: tax forms, employment letters with salary, anything you wouldn't want a forwarded email to expose.

Never put the password in the same email as the magic link — that defeats the purpose. Share it through a different channel: a text message, a call, a Signal/Slack DM, or in person.

Each failed attempt is recorded in the audit trail (event type password_failed). We don't lock the link automatically yet, but persistent failures show up clearly in the audit log so you can spot abuse.