What to Look for in a Boudoir Gallery Password System

A password on a gallery feels like security. Your client gets a code, types it in, and sees their photos. Simple enough, right?

For most types of photography, that might be fine. But for boudoir and intimate portraiture, a basic password is just the beginning. The real question isn't whether your gallery has a password — it's what happens behind the scenes after that password is entered. If your gallery system has gaps, a password is little more than a locked screen door on a house with open windows.

Why Basic Passwords Fall Short for Intimate Galleries

A simple password-protected gallery typically works like this: the client enters a code, and they get access to a page of images. Those images load via direct URLs. And that's where the problems start.

Direct URL sharing: Once an image loads in a browser, its URL is visible. If those URLs are permanent and unsigned, anyone with the link can access the image directly — no password needed.
Guessable gallery addresses: Many platforms use predictable URL patterns like /gallery/client-name or /gallery/12345. An attacker (or a curious stranger) can try different combinations and stumble onto a real gallery.
No brute-force protection: Without rate limiting, someone can try thousands of password combinations in minutes using automated tools. A four-digit PIN can be cracked almost instantly.
Session persistence: Some platforms keep users logged in indefinitely. If your client views their gallery on a shared computer, the next person to open that browser may see everything.

For wedding galleries, these gaps are minor inconveniences. For boudoir galleries, they're privacy violations waiting to happen.

What Makes a Good Password System

A truly secure gallery password system involves multiple layers working together. No single feature is enough — it's the combination that creates real protection.

Signed and Expiring URLs

This is the most important feature most photographers don't know about. A signed URL is a temporary, cryptographically generated link to an image. Instead of a permanent link like cdn.example.com/photos/image1.jpg, the URL includes a unique token and an expiration timestamp.

Even if someone copies the URL and shares it, it stops working after a short period. This means:

Forwarded links become useless within minutes or hours
Screenshot-capture bots can't index and store your image URLs for later access
Browser history doesn't become a backdoor to your client's photos

If your platform doesn't use signed URLs, every image in every gallery you've ever delivered is still accessible via its original link — forever.

URL Unpredictability

Your gallery URLs should be random and unguessable. A secure system generates gallery addresses using random strings — something like /g/x7k9mQ2pL instead of /gallery/jane-doe-boudoir. This means:

No one can guess gallery URLs by trying common names or sequential numbers
Search engines can't discover galleries by crawling predictable paths
Automated scanners can't enumerate your client list

Brute-Force Protection

Every password entry point should have rate limiting and lockout policies. A good system will:

Limit login attempts — after a certain number of wrong guesses, the gallery locks temporarily
Add progressive delays — each failed attempt increases the wait time before the next try
Alert the photographer when unusual access patterns are detected

Without these protections, even a strong password can be defeated by an automated script running thousands of attempts per second.

Secure Session Management

After a client enters their password, the session should be carefully managed:

Sessions should expire after a reasonable period of inactivity
Tokens should be unique to each device and browser
Logging out should actually clear access, not just hide the interface

How Different Platforms Handle Password Security

Not all gallery platforms approach security the same way. Here's how the most common options compare when it comes to protecting password-gated galleries.

| Security Feature | Google Drive / Dropbox | Pixieset | ShootProof | Pic-Time | VelvetVault | |---|---|---|---|---|---| | Password-protected galleries | No (link sharing only) | Yes | Yes | Yes | Yes | | Signed/expiring image URLs | No | No | No | No | Yes | | Randomized gallery URLs | No | Partial | Partial | Partial | Yes | | Brute-force protection | N/A | Basic | Basic | Basic | Yes (rate limiting + lockout) | | Session expiration | Platform-managed | Yes | Yes | Yes | Yes (configurable) | | No public indexing | No | Optional | Optional | Optional | Default (always private) | | Content scanning by platform | Yes | General policies | General policies | AI-based scanning | No scanning of artistic work |

Google Drive and Dropbox don't offer gallery passwords at all. They rely on link sharing, which means anyone with the link has access. There's no expiration, no brute-force protection, and no way to know who opened what. For intimate images, this is the worst option available.

The General-Purpose Gallery Problem

Platforms like Pixieset, ShootProof, and Pic-Time offer password protection, which is a good start. But most don't use signed URLs for individual images. Once your client loads a gallery, the underlying image URLs are often permanent and accessible without authentication. These platforms were built for wedding and portrait photographers where the threat model is different — the stakes of an unauthorized viewer seeing a wedding photo are much lower than seeing an intimate portrait.

The Purpose-Built Approach

VelvetVault was designed specifically for this threat model. Every image URL is signed and expires automatically. Gallery addresses are randomized. Rate limiting and lockout policies are enforced on every password entry point. Sessions expire after inactivity. And because VelvetVault doesn't scan or moderate your content with automated tools, there's no third-party system analyzing your client's intimate images.

What to Ask Your Current Platform

If you're already using a gallery platform, ask these questions:

Are my image URLs signed and expiring? If your platform can't answer this clearly, they probably aren't.
What happens after five wrong password attempts? If the answer is "nothing," your galleries are vulnerable to brute-force attacks.
Can someone access my images directly via URL without entering the gallery password? Test this yourself — right-click an image, copy its URL, open it in a private browser window. If it loads, you have a problem.
Are my gallery URLs sequential or guessable? Check the address bar when viewing a gallery. If it looks like a simple number or client name, it's guessable.
Does the platform scan my uploaded images? Automated content scanning means a third party is analyzing your client's intimate photos — even if the intent is benign.