A bearer link is a URL that grants access to a resource to anyone who has the complete link, without requiring a separate account or sign-in. The link itself acts like a credential, so anyone who obtains it may be able to view or download the shared content.
Bearer links are convenient for sharing, but they can expose private data if copied into logs, browser referrers, analytics systems, or historical DNS records. In real-world attacks, someone may discover or receive a link rather than break its token. Defenses include requiring recipient authentication, limiting link permissions, setting expiration dates, and supporting revocation. Treat a bearer link as a secret credential-not as a substitute for access control.