Two settings, one link
How to send a private screener to a client.
One link you wrote yourself, one code you can kill.
A screener is a film one group should see and nobody else should stumble into. That takes two decisions, not a workflow: which visibility mode the film sits in, and what the link looks like when it lands in an inbox. Here is the sequence, what the gate actually enforces, and the honest limit of a password.
Video hosting for filmmakers · 5 GB free · Paid plans from USD 9/month
By uncompressed.io · Updated September 2026
Pick the mode first
Five visibility modes,
two of them are a screener.
A film here sits in exactly one of five states: Private, Password, Unlisted, Public or Embed only. Everything else about sending a screener follows from that choice, so make it before you write the email.
Password
The link opens a gate. The viewer types the code you gave them and the page renders only after the server has checked it. The right default for a festival programmer, a broadcaster, an agency, or any list longer than the people you can name.
Unlisted
Not listed anywhere; anyone holding the link plays it immediately. The right default for the producer you have worked with for six years, when a code in the same email is theatre rather than security.
Private
Only you. Useful as a parking state while you finish the cut, and the state to drop a film into when a round is over and you do not want to think about codes again.
Embed only
The film plays inside iframes you control and both watch pages return 404 to everyone but you. This is for a film living on your own site, not for a screener you are emailing.
Public is the fifth, and it is the only one that has nothing to do with a screener. The choice that matters is Password against Unlisted, and it is a question about the recipient list rather than about the footage. A password is worth the extra sentence in the email when the film will be forwarded inside an organisation you do not control. It is friction with no payoff when the film is going to one producer who will open it on a phone in a taxi.
Test the gate as the recipient before sending it. An email-shaped code is not a verified identity check, and it should not be described as an email allowlist. A forwarded credential may still be usable by someone other than the intended recipient.
5
Visibility modes
Private, Password, Unlisted, Public, Embed only. One film, one state, changed in a click.
$0
What a password costs
Per-film passwords are on every plan, including the free Starter plan. No tier check anywhere.
20
Attempts per IP an hour
The gate is rate limited server-side, and the code itself never travels back to the browser.
30 days
One unlock lasts
The pass is an httpOnly, secure, sameSite lax cookie, so a returning viewer is not asked twice.
The sequence
Set it, send it,
then close it.
Four moves. The fourth is the one everybody skips, and it is the only one that decides whether the screener is still open a year after the job wrapped.
Set the film to Password or Unlisted
Open the film and pick the mode. On Password, type the code you will give the client. Anything you can say out loud on a phone call is better than anything clever, because the code is going to be retyped by someone on a train.
Write the link yourself
Set your handle and the film slug so the address reads uncompressed.io/yourstudio/the-film. A handle is 3 to 30 characters of lowercase letters, digits and hyphens; a slug is up to 60 characters. Both are editable, so the link can be named after the client rather than after a database row.
Send the link, and the code separately
The link goes in the email. The code goes in a second channel if the footage is worth the trouble: a text message, a call, the line under the invoice. Nothing about the platform enforces this, and it costs nothing, and it removes the single most common leak, which is one forwarded email carrying both halves.
Rotate or remove the code the day the round closes
The code is a field on the film, not part of the URL. Change it and every copy of the link still sitting in a forwarded thread stops working, while the address, the view count and any embed are untouched. Or move the film to Private and be done.
Why the fourth step matters more than the first
The link itself
A clean address
says who you are.
The address a client receives is part of the pitch. A link of the form uncompressed.io/yourstudio/the-film reads like a studio; a string of random characters reads like a file drop. Both work. Only one of them survives being pasted into a broadcaster’s internal ticket without somebody asking what it is.
There is a practical reason too. The owner-only analytics live on the clean handle route, so sending that link is what gets you the data described further down. Slugs are unique per account and editable at any time, so a film can be renamed between rounds without a new page.
When cut two is ready, upload a new version onto the same film instead of creating a second one. The stored file, its size, duration, frame rate and dimensions are replaced on the same record, and the old file is deleted. The link, the slug, the visibility, the password, the embed options and the view count all survive. The client clicks the link they already have and sees the new cut, which removes the most reliable source of confusion in a review round: two links in one thread.
The player itself carries no platform logo on any plan, free included. The only logo it can show is your own, and it is off by default. And because nothing is transcoded on the way in, the screener a client watches is the exact export you graded, not a re-encode of it.
The same screener elsewhere
What Vimeo charges for,
and what YouTube cannot do.
Both alternatives can carry a screener. The difference is what the privacy setting costs, and what it asks of the person on the other end. Every figure below is quoted from the platform’s own pages, fetched today.

Quotations are verbatim from the pages listed in Sources, all fetched 5 September 2026. Vimeo prices are the US dollar figures in the pricing page's own plan data; the page localises, so a Canadian visitor sees Canadian dollars. The Vimeo help centre and the Vimeo pricing page describe player branding differently, so only what each one says is quoted here.
The YouTube row worth reading twice is the sign-in one. Its unlisted mode is a link anyone can forward, and its private mode requires each viewer to be signed in to the exact account the film was shared with. For a festival programmer working through a shared submissions inbox, or a broadcaster whose staff live in a corporate identity system, that is not a small ask. It is the reason screeners sent to YouTube tend to end up unlisted, which is to say not gated at all. YouTube has also changed the meaning of unlisted retroactively before: older unlisted videos were switched to private in July 2021 unless the owner opted out.
The part most pages skip
A password is access control,
not leak prevention.
Say it plainly, because the distinction decides what you should send in the first place. A gate stops someone who found the URL. It does nothing about someone you invited.
Anyone holding the link and the code can forward both, in one message, to anyone. Browser DRM can restrict some capture paths on supported devices; a password alone cannot. No setting on any platform, ours included, stops a phone pointed at a monitor. The gate is a real control and it is enforced in the right place, on the server, before the page renders, with a rate limit and a code that never reaches the browser. It is still a control over who can open the door, not over what happens once someone is inside the room.
What actually raises the bar is attribution, and that is what Vault is for. Vault masters play only in the native app rather than a browser tab, supported software capture paths are restricted, every session carries a watermark, and a per-person forensic mark is designed to help investigate a copy that escapes. Recovery depends on the condition of that copy. The native playback cache uses AES-256 encryption and playback runs on short-lived links. That is the toolset for footage under embargo. For a colour round on a corporate film, a password and a habit of rotating it is the proportionate answer, and pretending otherwise wastes your client’s afternoon.
After you send it
Whether they watched it,
or only opened it.
A screener that produced no notes produced one of two situations, and they call for opposite emails. The owner-only analytics on the clean handle link separate them: opens, plays and the rate between them, unique visitors, views per person, a per-day series, average view time, total view time, average percent watched, finishes, a retention curve, a watch-time histogram, top countries and top referrer sources, over 7, 30 or 90 days or all time.
The retention curve is the one that changes a conversation. A note that arrives with a curve showing the viewer stopped at 00:40 is not a note about the ending. Your own visits never bump the view counter, so the numbers describe the client rather than your rewatching. Download and bandwidth reporting are not shipped; they show as coming soon in the dashboard, and this page will not claim them.
Honest framing
When you should
stay where you are.
You already pay Vimeo, and the cut is a 1080p H.264
The password on a paid Vimeo plan gates the same way. If your reviewers are used to that page and the footage is an ordinary deliverable, switching hosts to gain a gate you are already paying for is work without a result. The reasons to move are the re-encode, the branding and the price of the tier, not the padlock.
The screener is really a public film
If the goal is reach, and the privacy setting is only there for two weeks before a launch, YouTube's free hosting and its recommendation surface are the point. Accept the re-encode, accept that ads may be served on channels outside the Partner Program, and publish.
You need one revocable link per recipient
We do not do that today. The gate is per film: a shared code, which does not independently verify each recipient. If your process requires an individually revocable credential for each viewer, that is a genuine reason to look elsewhere, and no phrasing on this page changes it.
What is left, once those three are set aside, is the common case: a working studio sending a cut to a client who should not have to make an account, on a link that looks like the studio, behind a code that can be retired the day the job closes, playing the file that was actually exported. That case is free here, and it is the reason this page exists.
Vault review requires a compatible Mac and authorized native access. Capture restrictions and watermark recovery depend on the viewing setup and recovered footage; they do not guarantee that a leak can be prevented or attributed.
Vimeo prices depend on the selected billing term and team seats. Check current Vimeo pricing and allowances before choosing or changing a subscription.
Confirm both access and the review destination
Open the intended screener link in a signed-out browser and verify the chosen access behavior. Tell the recipient which version they are viewing and where to leave feedback. Avoid sending a creator dashboard link as though it were the viewer’s page.
If the screening will happen on a TV, test that route before the meeting and agree how notes will be recorded. A television viewing session does not automatically create timecoded comments or an approval record in the project.
Questions
Frequently asked
What is the difference between Password and Unlisted for a screener?
Unlisted means the film is not listed anywhere and only someone holding the link can open it. Password means the link alone is not enough: the viewer types a code, and the page renders nothing until the server checks it. Use Unlisted for a routine client cut going to people you already trust. Use Password when the recipient list is wider than the people you know by name, such as a festival, a broadcaster or a brand's agency.
Does my client have to make an account to watch?
No. Viewers never sign up for anything. At most they type the code you gave them, once. The unlock is stored as an httpOnly, secure, sameSite lax cookie that lasts 30 days, so the same person opening the link again the next morning is not asked twice.
Do I need a paid plan to password-protect a screener?
No. Per-film passwords, unlisted links, embed-only mode, the custom link and the unbranded player are all on the free Starter plan. The free plan's limits are 5 GB of storage, one film at a time, 20 caption minutes a month and one team seat. On Vimeo, by contrast, the help centre lists Password, Unlisted and Embed only as available with paid plans.
Can I change the code without breaking the link I already sent?
Yes. The code is a field on the film, not part of the URL. Change it or remove it and the address stays exactly the same, along with the view count and any embed. That is what makes the end-of-job step cheap: rotate the code the day the round closes and every copy of the link that is still floating around goes dark.
Can I send a new cut without sending a new link?
Yes. Upload a new version onto the same film and the file is swapped in place. The address, the slug, the visibility, the password, the embed settings and the view count all survive, so the link in the client's calendar invite plays cut three without a second email.
Is a password enough for an unreleased film?
No. A password is access control, not leak prevention: whoever holds the link and the code can forward both, and a password alone does not prevent screen recording. For embargoed footage the honest answer is Vault, where masters play only in the native app, supported software capture paths are restricted, every session carries a watermark and a per-person forensic mark can help investigate a recovered copy.
Can I tell whether the client actually watched it?
Viewing analytics provide playback signals, not independent proof of who watched or whether they approved the film. Confirm the decision with the client and record the selected version.
Send the cut, keep the control
Per-film passwords, unlisted links, an unbranded player and no re-encode, on every plan including the free one. Vault adds native-app playback, restrictions on supported capture paths and a per-person forensic mark for the footage that cannot leak.
Sources
- 1.uncompressed.io: how screeners are protected (verified in the product, fetched 5 September 2026)
- 2.uncompressed.io pricing: plans, storage and the free Starter plan (verified in the product, fetched 5 September 2026)
- 3.uncompressed.io Vault: native-app playback, restrictions on supported capture paths, session and forensic watermarks (verified in the product, fetched 5 September 2026)
- 4.Vimeo Help Center: privacy settings and the plans each one requires (fetched 5 September 2026)
- 5.Vimeo Help Center: what happens when a paid plan lapses to Free (fetched 5 September 2026)
- 6.Vimeo Help Center: watermarks cannot be removed on Free or Basic plans (fetched 5 September 2026)
- 7.Vimeo Help Center: videos are re-encoded into several formats during transcoding (fetched 5 September 2026)
- 8.Vimeo pricing: self-serve plan prices in US dollars, and the no-ads statement (fetched 5 September 2026)
- 9.YouTube Help: unlisted videos can be seen and shared by anyone with the link (fetched 5 September 2026)
- 10.YouTube Help: private videos require the viewer to be signed in to the account the video was shared with (fetched 5 September 2026)
- 11.YouTube Help: older unlisted videos were made private in July 2021 (fetched 5 September 2026)
- 12.YouTube Help: ads may be served on channels outside the YouTube Partner Program (fetched 5 September 2026)
- 13.YouTube Help: YouTube always re-encodes videos (fetched 5 September 2026)
- 14.YouTube IFrame Player API: modestbranding is deprecated and has no effect (fetched 5 September 2026)
