Your iCloud link isn't broken — it's been moved, unshared, or shared the wrong way

A buyer says the link doesn't open. You check it on your own phone, already signed into iCloud, and it looks completely fine — which tells you nothing, because an iCloud Drive link behaves differently depending on whether you're the owner, an invited participant, or a stranger with just the link. The fix usually isn't republishing anything. It's one of two settings Apple gives you, checked in the wrong order or not checked at all.

Setting one: who can open it at all

Apple's own guide puts it as a straight choice between two modes: "Allow only people you invite to access the file or folder", or "Allow anyone who receives the link to access the file or folder." A link copied while the first mode is active opens for nobody except the specific people added — which, for a digital product landing in a stranger's Etsy inbox, is every buyer who isn't you.

Setting two: what they're allowed to do once they're in — and this one matters more than a dead link

This is the one worth checking even if the link is working. Under "anyone with the link", Apple gives the owner a second choice: "Allow new participants to edit the file or folder", or restrict them to "view and download" only. Pick the first by habit — it's not the default Apple steers you toward, but it's one tap away from it — and every buyer who opens the link can edit or delete the actual file every other buyer is downloading from, not a copy of it.

That's a worse outcome than a link that simply fails, because nothing about it looks wrong until the file is gone or quietly altered. The Google Drive guide and the Dropbox guide cover the same risk on those two hosts, where AccessDrop's check does at least catch the edit-link URL pattern. On iCloud it can't — see below.

A gap in our own access check, stated plainly

We tested what a made-up iCloud share link actually returns, rather than assuming: a request to `icloud.com/iclouddrive/` with an invented ID comes back as an ordinary HTTP 200, serving Apple's single-page app shell — the same response whether the link is live, has been moved into oblivion, or was never real to begin with. Apple's page decides what to show you after that, inside your browser, not in the server's status code.

Our check can't read the page the way a browser does, and there's no lighter check to fall back on either. The Drive, Dropbox and Canva guides describe one that spots an obvious edit-link pattern from the URL alone, before a request is even made. iCloud has no such pattern, because Apple's edit permission is a setting behind the link, not something visible in the URL. So AccessDrop can't tell a working iCloud link from a moved one, and it can't tell whether you've shared with edit access on.

What it does now is say so. Until 3 October an iCloud link that answered at all got the same green "Link looks good" as a checked Drive link. It now gets its own "Can't be verified from outside" status on your dashboard, with a note to open it in a private window yourself and to set it to view and download. If Apple's server does send back an error, such as a 404, that is still reported as an error. Every other supported destination (Drive, Dropbox, OneDrive, Canva) has detection for at least one of these problems; iCloud has none, and the dashboard no longer pretends otherwise.

What to actually do

1. 1

   Check the share settings from the owner's account, not just the link

   Open Files or iCloud Drive on the Apple device or account that created the share, find the item, and look at its share settings directly — not whether the link loads for you, since you'll often be signed in as a participant already.

2. 2

   Set it to view-only, deliberately

   Unless buyers genuinely need to add their own files back, choose "view and download" rather than "edit". This is the one change worth making even on a link that's currently working fine.

3. 3

   Never move or reorganise a shared file once the link is out

   If you need to tidy up your iCloud Drive, do it to a copy, or accept that the live link has to be reissued and reprinted everywhere it's been given out.

4. 4

   Move the file to a permission-based host you can actually audit

   Google Drive, Dropbox and OneDrive at least show their failure as a sign-in redirect our check already reads. iCloud's isn't built to be checked the same way from outside Apple's own apps.

WeTransfer and Mega fail on a timer or a shared bandwidth quota instead of a permission — the WeTransfer guide and the Mega guide cover those if either is what you're actually using.

AccessDrop takes a Drive, Dropbox, Canva or OneDrive link and turns it into a branded delivery PDF with a QR code and a short link you can repoint later, checking weekly that the destination still answers. £19 for a year, one payment, up to 5 deliverables — it doesn't host your files, and for iCloud links specifically, as explained above, the weekly check can't see what Apple's own share settings are doing, and marks the link as unverified rather than fine. Point it at a host our check can actually read.