Client Gallery with Download PIN: How to Protect Your Photos Without Friction

Photo galleries need some level of protection — not because your clients are a security risk, but because a shareable link can end up in unintended hands. Full password protection creates friction: clients forget passwords, need resets, and the whole thing becomes a support issue. A download PIN strikes the right balance: simple to implement, simple for clients to use, and effective enough to prevent casual unauthorized access.

How PIN Protection Works in Lumeny

In Lumeny, you set a short PIN code for each gallery in your dashboard. When you share the gallery with your client, you send the link and the PIN separately — the link in an email, the PIN via text message, for example.

When a client opens the gallery link, they see a PIN entry screen. They enter the code, the gallery opens. From that point, they can browse and download freely without re-entering the PIN during the session.

The separation of link and PIN is important: someone who finds the link in a forwarded email can't access the gallery without the PIN. Someone who only has the PIN can't access anything without the link. Together, they provide a lightweight but effective access control mechanism.

This is different from a full password login — there's no account to create, no password to remember long-term, and no recovery flow. It's a one-time access code for a specific gallery.

Why PINs Beat Passwords for Client Galleries

The goal of gallery protection is to control access without creating a frustrating client experience. Full passwords fail this goal regularly:

• Clients forget them between delivery and when they finally sit down to download
• Password reset flows create support burden
• Some clients (especially older generations) find account-based systems confusing

A PIN avoids all of this. It's typically 4–6 digits, easy to type on a phone, and memorable enough that a client can enter it immediately. The experience is: open link → type PIN → browse photos. No account, no recovery email, no support ticket.

The tradeoff is that PINs are less secure than full authentication. But for the use case of a photographer delivering photos to a specific client, PINs are appropriate — they prevent casual unauthorized access while keeping the client experience smooth.

Gallery Protection Options Compared

Protection Method	Security Level	Client Friction	Best For
No protection	None	None	Public portfolio pages
PIN code	Medium	Very low	Client gallery delivery
Password	Medium-high	Medium	Long-term access areas
Full login required	High	High	Enterprise client portals

For the delivery use case — sending a finished gallery to a specific client — PIN protection is the right choice. Lumeny's implementation of PINs is designed to be set up in seconds and entered by clients in seconds.

Frequently Asked Questions

How long is the PIN in Lumeny? PINs can be set to whatever length you prefer. Common practice is 4–6 digits — short enough to type on mobile without frustration.

Can I set a different PIN for each gallery? Yes. Each gallery in Lumeny can have its own unique PIN. This means one client's PIN doesn't work on another client's gallery.

What if a client enters the PIN wrong? There's a retry mechanism — clients can re-enter the PIN if they make a typo. There's no lockout after a certain number of attempts (this is a low-security access mechanism, not a bank vault).

Can I share a gallery without a PIN? Yes. PIN protection is optional. You can publish a gallery as publicly accessible (useful for portfolio content) or require a PIN for private client galleries.

Written by Christian Bauer, founder of Lumeny and photographer with 10+ years of experience.