mxHERO Shares Recipient Experience

This page describes what a recipient sees when they open an mxHERO Shares link: the landing page, sign-in, previews, downloads and error messages. Use it to answer recipient questions, to prepare your users, and to tell your partners' IT teams which addresses to allow.

The link

mxHERO Shares links look like this:

https://{tenant}.mxherocloud.com/s/{share-id}

{tenant} is the subdomain you chose in mxHERO Shares › Settings (for example acme.mxherocloud.com). A download link is the same address followed by ?d=1.

Older links on shares.mxherocloud.com or files.mxherocloud.com still work: they redirect to the tenant address.

What the recipient sees

The landing page opens public links directly and sends protected links through a password form or a sign-in page.

Public links

The file opens in a preview page, or the folder shows a list of files. No sign-in is needed.

Password-protected links

The recipient sees "Enter the password for this resource" and types the password from the separate password email. A wrong password shows "Invalid password".

Organization and Authenticated links

The recipient is sent to auth.mxherocloud.com and sees "User authentication is required to access this content, please sign-in using one of the following methods:" with the methods you allowed:

• Sign-In Using Google
• Sign In using Microsoft
• Use a Verification Code

With a verification code:

1. The recipient enters their email address.
2. mxHERO checks that the address is allowed for this link. If not, they see that the user is not authorized to access the content.
3. mxHERO emails a 6-digit code from noreply@notifications.mxhero.com, with the subject "Your mxHERO share authorization code". The email's language follows your organization's language (English, Japanese or French).
4. The recipient enters the code. It is valid for 10 minutes and works once, for this link only. They can click Re-send code to get a new one.

With Google or Microsoft, a sign-in window opens. After sign-in, mxHERO checks the account's email address against the link.

After a successful sign-in, the file or folder opens. The recipient must sign in again for each protected link.

Viewing and downloading

• Preview in the browser is available for: PDF, Word (doc, docx, odt), Excel (xls, xlsx, csv), PowerPoint (ppt), images (jpg, jpeg, png, gif, bmp, tiff, webp), text (txt, htm, html) and video (mp4).
• Office files are previewed with Microsoft's online viewer.
• Other file types show "Preview unavailable for file:" and a Download file button.
• Folders show "Shared Files:" with the file name, size, created and last-modified dates, and a Download button per file. An empty folder shows "This shared folder is empty".
• If downloads are not allowed for the link or your organization, the file is preview-only and no download button is shown.
• The page is available in English, Japanese and French. It follows the browser language, and the recipient can switch with the language selector.

Messages recipients may see

Note: Recipients of a file blocked as malware see the same "does not exist or has expired" message. Check mxHERO Shares › Malware if a recipient reports a link that should still be valid. See Malware Detection.

Addresses to allow

If your recipients' organizations filter web traffic or email, they may need to allow:

Password emails come from the original sender's address when their domain is managed by mxHERO, otherwise from noreply@mxhero.com.

Prepare your recipients

Tell regular external contacts:

• Links come from {tenant}.mxherocloud.com.
• For protected links they'll get a 6-digit code by email, valid for 10 minutes, or can sign in with Google or Microsoft.
• Passwords, when used, arrive in a separate email.

You can point recipients to Opening Protected Attachments.

Related pages

• mxHERO Shares Link Types and Security
• mxHERO Shares Settings
• Opening Protected Attachments
• Network Endpoints and IP Addresses