Skip to main content

What changes do we implement?

We’re releasing a security update, which will apply to some Drive files. This will make Google Drive files more secure as their links will be updated, and may result in new file access requests. While we recommend that you apply the update, Google Workspace administrators can choose how this update is applied to their organization.

Who is affected by this change?

To administrators and end users

Why is it important?

This security update will be applied to some Google Drive files to make sharing links more secure. The update will add a resource key for sharing links. Once the update has been applied to a file, users who have not seen the document before will need to use a URL containing the resource key to gain access, and those who have seen the document before or have direct access will not need to the resource key to access the file. Learn more about resource keys and how they could impact your files.

How to get started

Administrators: You can use the Alert Center to see how many users, folders, shared drives, and files are affected in your organization. Look for an alert with the subject “Security update.” Before July 23, 2021, administrators must choose how the security update will be applied to their organization. Use our Help Center to learn more about this update and how to implement it in your organization.

End users: Unless the administrator rejects the security update for their organization, end users who own or manage the affected files will receive an email notification starting July 26, 2021 with its affected files. End users will have until September 13 to determine how the update is applied to their files, if their administrator allows it. Use our Help Center to learn more about how this update will affect end users .

Users with personal accounts: Users who are not part of a Google Workspace domain will receive a notification from Google Drive informing them of their affected files starting July 26, 2021 and will have the option to remove the security update. These users will have until September 13, 2021 to determine how the update applies to their files. Use our Help Center to learn more about how this update will affect end users .

Developers: Elements that have a Drive API permission with type=domain or type=anyone, where withLink=true (v2) or allowFileDiscovery=false (v3). In addition to the item ID, your application may also need a resource key to access these items. Use our developer resource to learn more about how update will affect your projects.


In the Alert Center, administrators will be able to see how many users, folders, shared drives, and files will be affected in the organization.


Administrators can choose how the security update is applied to their organization in the Management Console applications > Google Workspace > Drive and Documents > Sharing Settings > Security update for links.


End users who own or manage the affected files will receive an email notification starting July 26, 2021 with their affected files. Depending on the settings your administrator has chosen, they will have the option to remove the security update from the affected files.

Throwing rhythm

Rapid and scheduled release domains:

  • Before July 23, 2021: Administrators can choose how to apply the update to their organization.
    • For customers not using an Education edition, the update will be applied by default, and affected end users will receive a notification with the option to exclude their files from the update.
    • For customers using an Education edition, the update will be applied by default, and affected end users will receive a notification without the option to exclude their files from the update.
  • Starting July 26, 2021: Depending on administrator settings, affected end users will be notified about the relevant files and the options available to them.
  • Starting September 13, 2021: Forcing administrator and user options will occur on selected files if the settings were not changed in advance.

Applicability

  • It is available to all Google Workspace customers, as well as G Suite Basic and Business customers, and users with personal Google Accounts.

Resources

Google will release a security update for YouTube and Drive. If you want more details about YouTube updates, click click here.