SharePoint Sharing Link Expiration: New Limits

Introduction

SharePoint Online and OneDrive for Business offer internal sharing links that allow any authenticated user in the organization to access shared files. These links, called "people in your organization", ensure secure internal use while preventing external access.

However, the circulation of links that are not automatically deleted can lead to compromise risks. To address this issue, Microsoft introduced in 2026 a new feature allowing you to set expiration dates for these links in SharePoint Online and OneDrive.

[IMAGE:index:url:alt]

Configure a link expiration policy

Settings and configuration via PowerShell

By default, no expiration policy is set for internal links in Microsoft 365. However, administrators can configure this policy to enforce uniform limits. This can only be done using PowerShell, as the SharePoint Online web administration interface does not contain these options.

1Set-SPOTenant -CoreOrganizationSharingLinkMaxExpirationInDays 60
2Set-SPOTenant -CoreOrganizationSharingLinkRecommendedExpirationInDays 30
3Set-SPOTenant -OneDriveOrganizationSharingLinkRecommendedExpirationInDays 30
4Set-SPOTenant -OneDriveOrganizationSharingLinkMaxExpirationInDays 60

1Get-SPOTenant | Format-List *SharingLink*Days

1OneDriveOrganizationSharingLinkMaxExpirationInDays         : 60
2OneDriveOrganizationSharingLinkRecommendedExpirationInDays : 30
3CoreOrganizationSharingLinkMaxExpirationInDays             : 60
4CoreOrganizationSharingLinkRecommendedExpirationInDays     : 30

Site-level exceptions

Administrators can also implement specific policies for certain sites. For example, you can set a maximum expiration of 150 days for a specific site with the following command:

1$Uri = "https://office365itpros.sharepoint.com/sites/BlogsAndProjects"
2Set-SPOSite -Identity $Uri -OverrideTenantOrganizationSharingLinkExpirationPolicy $True -OrganizationSharingLinkMaxExpirationInDays 150 -OrganizationSharingLinkRecommendedExpirationInDays 45

To verify these settings:

1Get-SPOSite -Identity $Uri -Detailed | Format-List *SharingLink*Days

This will display:

1OrganizationSharingLinkMaxExpirationInDays         : 150
2OrganizationSharingLinkRecommendedExpirationInDays : 45

Additional tips

Managing security for sensitive sites

Ensure protection of confidential sites by applying sensitivity labels to limit sharing options. You can also block content discovery for Microsoft 365 Copilot through specific restrictions.

Auditing sharing events

Use the audit logs generated by SharePoint Online and OneDrive to analyze sharing events. These data, accessible through analytical tools, allow you to identify trends and potential risks. More information is available in the official documentation.

Useful links

• Microsoft documentation on shareable links: Read here
• Microsoft 365 Roadmap: Consult here
• Tutorial on sensitivity labels: Learn more

Glossary of terms

• Internal links: Links accessible only to authenticated users in the organization.
• Set-SPOTenant cmdlet: PowerShell command used to configure settings at the tenant level.
• Sensitivity labels: Security settings applied to SharePoint sites to limit data distribution.

Tags

• "SharePoint Online"
• "OneDrive"
• "Sharing links"
• "Link expiration"
• "M365 security"
• "PowerShell"