Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteFor ongoing matter documents, a properly configured client portal or business file-sharing workspace is usually the safer default than ordinary email because it can limit access to named users, keep files organized by matter, and provide records of sharing activity. Encrypted email remains useful when the client’s workflow is centered on email, but “encrypted” is not a security verdict: the firm must verify recipient authentication, protection after delivery, forwarding and download controls, and what happens on shared devices.
There is no universal ABA rule requiring one technology for every message. ABA Formal Opinion 477R frames confidentiality as a risk-based professional judgment. The right choice depends on the information, client instructions, engagement terms, applicable law, and the firm’s ability to configure and operate the system correctly.
As an Amazon Associate I earn from qualifying purchases.
The short answer: choose controlled access for continuing matter work
A portal is the best fit when a matter requires repeated exchange of pleadings, discovery, drafts, invoices, or other confidential records. It can attach communications and documents to the client matter, let staff select exactly what the client may see, and reduce the manual copying of messages from email into the file. Those benefits depend on disciplined matter setup, correct permissions, and client adoption.
Recommended Free Tools
A business file-sharing workspace can provide similar controls through shared folders, named users, upload and download permissions, expiration dates, and activity logs. It is not automatically secure: an incorrectly shared folder, a public link, or a consumer account can defeat the intended protection.
#1 Best Overall
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Rugged Double-Layer Waterproof* Design - Protects the crypto drive against knocks, drops, break-in and submerging in water. The electronics are shielded by a hardended inner case. The rubberised silicone outer casing provides a final layer of protection
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
Encrypted email is practical for an email-centered relationship or a one-off exchange. Before relying on it, determine whether content is encrypted in transit and at rest, whether the recipient must authenticate before viewing it, whether protection survives opening or downloading, and whether forwarding, expiration, recall, and access revocation are actually enforced.
What lawyers’ confidentiality duties require
The governing question is whether the firm has taken reasonable steps to prevent inadvertent or unauthorized access, not whether a product carries an “encrypted” label. ABA Formal Opinion 477R, revised May 22, 2017, states: “A lawyer generally may transmit information relating to the representation of a client over the internet without violating the Model Rules of Professional Conduct where the lawyer has undertaken reasonable efforts to prevent inadvertent or unauthorized access.” The opinion also says that a client agreement, applicable law, or the nature of the information may require special precautions.
That is ABA guidance, not a substitute for the rules and ethics opinions in the lawyer’s jurisdiction. Engagement letters, protective orders, court rules, data-protection laws, and client security requirements can impose stricter conditions. A firm should document why its chosen method is reasonable for the particular information and review the decision when the risk changes.
Risk factors to assess before sending
- Sensitivity: medical, financial, trade-secret, identity, criminal, employment, and privileged material may have different consequences if disclosed.
- Client instructions: follow a client’s required portal, encryption method, retention period, or approved vendor when those instructions are part of the engagement.
- Recipient certainty: verify the person, domain, role, and authority to receive the material; a familiar email address is not proof that the correct person is using the account.
- Operational setting: account sharing, unmanaged phones, family computers, auto-forwarding, and local downloads can expose material after the firm has transmitted it.
- Record obligations: determine how the communication, access history, and final document become part of the matter file and how long they must be retained.
Client portal, business file-sharing, and encrypted email compared
| Decision point | Client portal | Business file-sharing workspace | Encrypted email |
|---|---|---|---|
| Best use | Continuing, matter-centered exchange with a client or approved participants. | Controlled folders and collaboration across a firm, client, or outside counsel. | Email-led communication, especially a discrete message or attachment. |
| Access control | Staff can select which matter documents each client sees; verify named-user, least-privilege, upload, and download settings. | Recipient-specific permissions, separate matter folders, and role-based access are available when configured. | May use a secure viewing link or protected attachment; confirm whether access is tied to an authenticated recipient rather than possession of a link. |
| Authentication | Often supports an account sign-in and, where offered, multifactor authentication (MFA); require a suitable level for the risk. | Use named accounts and MFA; do not substitute a broadly accessible link for identity verification. | Check whether the recipient authenticates before viewing and whether the recipient’s mailbox or device is shared. |
| Encryption lifecycle | Verify encryption in transit and at rest, plus what happens when a user previews, downloads, or reshares a file. | Verify encryption in transit and at rest and the protections applied to synchronized local copies. | Check in-transit and at-rest coverage, then determine whether protection continues after opening, downloading, forwarding, or printing. |
| Expiry and revocation | May allow access expiry or removal; test whether a downloaded copy remains outside that control. | Upload/download rights and link expiration can limit exposure; test revocation and existing copies. | Some systems offer expiration, recall, or forwarding restrictions; do not assume those features erase a downloaded file. |
| Matter records | Can save communications and documents in the client matter, reducing manual movement between systems. | Requires a deliberate folder, naming, retention, and filing process so the official matter record is complete. | Usually requires staff to capture the message, attachment, and relevant access information in the matter file. |
| Main failure mode | Incorrect matter permissions, dormant user accounts, or a client who never completes portal setup. | Public links, inherited permissions, cross-matter folders, or consumer accounts used for confidential work. | Misaddressed mail, weak recipient verification, shared devices, or an attachment that is unprotected after delivery. |
The American Bar Association’s 2023 discussion of client file sharing describes these controls and emphasizes considering both data at rest and data in transit. Its 2022 Law Practice discussion describes password-protected, recipient-specific access as preferable to an unprotected link and notes controls such as upload/download permissions and expiration. These are control categories to verify, not guarantees that every product implements them identically.
When a client portal is the better choice
Matter-centered organization
A portal built into a law-practice-management system can keep messages and documents attached to the correct client matter. That reduces the chance that a staff member leaves an important email in a personal mailbox or forgets to copy it into the official file. The ABA Law Practice Division’s May/June 2023 article identifies this reduction in manual movement as a practical advantage.
Rank #2
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
- SuperSpeed USB 3.0 - Transfer all your confidential files and folders faster than ever before. Works on both PC & Mac
Organization is not automatic. Create a separate workspace or matter for each client and engagement, define who may see it, and establish naming and version rules before uploading documents. A portal that mixes unrelated matters or gives every internal user access to every client is not meeting the least-privilege goal.
Selective client visibility
Use matter permissions to distinguish documents intended for the client from internal work product, drafts, conflict material, and communications that should remain inside the firm. Before enabling a client, review inherited permissions and test the client view with a nonproduction account. When a matter closes or a person leaves the representation, remove access according to the firm’s retention and disengagement procedures.
Repeated exchange and multiple communication types
Portals are efficient when the same participants exchange files repeatedly, comment on drafts, complete questionnaires, or receive status messages. A single controlled destination is easier to explain than a series of ad hoc attachments and links. Client adoption still matters: if a client cannot sign in or does not monitor the portal, staff may create an insecure parallel channel. Provide a short onboarding guide and a fallback process that preserves the same security standard.
When a business file-sharing workspace is appropriate
Use a business edition, not a free consumer account
Business versions of Microsoft 365/OneDrive/SharePoint, Google Workspace, Dropbox Business, Box, and Citrix ShareFile can provide controlled shared folders and collaboration features. The ABA’s 2023 article distinguishes these business offerings from consumer free accounts; a free account should not be treated as interchangeable for confidential legal work. Confirm the contract, administrator controls, audit capability, retention and deletion terms, incident response, and data-location commitments before placing client material there.
Build a matter-specific permission model
- Create a top-level structure that separates clients and matters. Do not place unrelated matters in one broadly shared folder.
- Assign named users or groups based on their role. Use least privilege: viewing, uploading, editing, and downloading are different rights.
- Disable public or “anyone with the link” access unless a documented risk decision specifically permits it. Prefer a recipient-specific link that requires sign-in or another authentication step.
- Set an expiration date for temporary access and record who approved the sharing. Confirm that expiration removes access rather than merely hiding the link.
- Review inherited permissions, guest accounts, synchronization to local devices, and automatic sharing by parent folders.
- Test the recipient experience with a separate account. Verify that the intended person can open the file and that an unintended account cannot.
The ABA’s ethics discussion of file sharing and its July/August 2022 secure-sharing and email discussion both support recipient-specific, password-protected access over an unprotected link. A link that can be forwarded without authentication is functionally a credential anyone can possess.
Rank #3
- Certified to FIPS 197 - U.S. Government Approved High Level Information Security Standard.
- Protection against brute force password attacks - Data is automatically erased after 6 unsuccessful access attempts. The data of the USB flash drive type c encryption with dual connectors is destroyed and the cryptographic drive is reset.
- Durable dual-layer waterproof design* — Protects the crypto reader from bumps, drops, run-in and immersion in water. The electronics are protected by a hardened internal case. Rubberized silicone outer case provides a final layer of protection.
- Auto-Lock —The cryptographic key automatically encrypts all data and locks when removed from a PC/Mac or when screen protection or "computer lock" is enabled.
- Secure Entry —Data on these flash drives cannot be accessed without the correct alphanumeric password of 8 to 16 characters. A password indication option is available for this flash drive. The hint cannot match the password.
Keep the workspace from becoming an ungoverned archive
Decide which copy is the official record. If the workspace is only a transfer area, schedule filing and deletion steps; if it is the working matter repository, define version control, retention, legal holds, and closure procedures. Keep an audit trail of invitations, permission changes, downloads, and deletions where the service provides one. Review inactive guests and old links on a regular schedule rather than waiting for a matter incident.
When encrypted email makes sense—and what to verify
Email is a channel, not a complete control set
Encryption can protect a message while it travels or while it is stored on a provider’s systems, but those layers do not answer every question. Ask the provider or administrator exactly which portions are encrypted, where keys are controlled, and whether the recipient must authenticate before viewing the content. Confirm what the recipient receives after opening: a protected viewer, a normal downloadable file, or an unencrypted copy.
Protect attachments separately when required
For a high-risk attachment, use a password-protected file or a secure viewing mechanism and send the password through a different channel, such as a verified phone number. Do not put the password in the same email or in an adjacent reply. Tell the recipient how to identify the legitimate message and how to report a suspicious request.
Check the post-delivery exposure
- Does the message remain protected after the recipient opens it, or can it be forwarded as ordinary text?
- Can the recipient download, print, synchronize, or screenshot the material, and does the firm need to restrict any of those actions?
- Do expiration or recall features revoke a file already downloaded to a laptop or phone?
- Could a shared mailbox, delegated assistant, family device, lock-screen preview, or automatic forwarding expose the content?
- Is MFA enabled for the sender and recipient accounts, and are recovery methods controlled?
An encrypted message sent to the wrong address is still a disclosure. Verify the address using a trusted contact already on file, especially when a client has recently changed banks, domains, or personnel. For a first exchange, consider a low-sensitivity confirmation message or a phone verification before sending the substantive file.
A decision framework for each transmission
- Classify the information. Record the sensitivity, privilege implications, personal data, contractual restrictions, and consequences of disclosure.
- Check the governing requirements. Review client instructions, engagement terms, protective orders, applicable law, and jurisdiction-specific ethics guidance.
- Choose the access model. Use a portal for continuing matter work; a business workspace for controlled collaboration; encrypted email when email is operationally necessary and its protections meet the risk.
- Identify the recipient. Confirm the address, role, authority, and preferred secure channel. Do not rely on an unprotected link or an autocomplete suggestion.
- Configure least privilege. Set named access, view/edit/upload/download rights, MFA, expiration, and revocation. Separate matters and internal-only material.
- Check the full encryption lifecycle. Verify protection in transit, at rest, during viewing, and after download or synchronization.
- Send a test or low-risk notice. Ensure the client can authenticate and understands where the document is located before delivering sensitive material.
- File the record. Preserve the message, document version, permission decision, and relevant access history in the matter system according to retention rules.
- Close the access. Remove temporary users, expire links, and address downloaded or locally synchronized copies when the purpose ends.
Implementation checklists
Portal rollout checklist
- Define a standard matter template with separate client-visible and internal folders.
- Require MFA where available and establish an identity-verification process for invitations and password recovery.
- Document who may publish, edit, download, or delete client-visible files.
- Test a client account, a removed account, and an account with the wrong matter assignment.
- Explain notifications, deadlines, file naming, and support contacts in plain language.
- Set a closure procedure for access removal, retention, export, and deletion.
Business workspace checklist
- Use an administrator-managed business tenant with contracts and security documentation reviewed by the firm.
- Turn off anonymous links by default and monitor guest invitations.
- Review inherited permissions and synchronization to unmanaged devices.
- Enable audit logs and retain the events needed for investigations and matter records.
- Schedule permission reviews for long-running matters and dormant accounts.
Encrypted-email checklist
- Confirm whether encryption covers both transport and stored content.
- Require recipient authentication appropriate to the information’s sensitivity.
- Use a separate channel for attachment passwords.
- Disable or account for auto-forwarding, shared mailboxes, and lock-screen previews where feasible.
- Record the final message and attachment in the matter file.
Common failure modes and fixes
“Anyone with the link” sharing
Symptom: a staff member sends a convenient URL without recipient sign-in. Fix: replace it with a named-recipient invitation, require authentication, set an expiry, and review whether the old link must be revoked.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRank #4
- FIPS 197 with XTS-AES 256-bit Encryption: Provides business-grade security with hardware-based encryption to protect your sensitive data
- Brute Force and BadUSB Attack Protection: Safeguards against unauthorized access attempts and malicious USB attacks with digitally-signed firmware
- Multi-Password Option with Complex/Passphrase modes: Offers flexible password configuration options to meet various security requirements and user preferences
- New Passphrase Mode: Enhanced security feature allowing users to create longer, more memorable password phrases for easier access without compromising protection
- Dual Read-Only (Write-Protect) Settings: Enables write protection functionality to prevent accidental data modification or deletion when needed
Wrong matter or inherited folder access
Symptom: a client sees another client’s folder or an internal draft. Fix: stop sharing, preserve the access record, notify the responsible privacy or ethics contact, correct the folder inheritance, and reassess whether notification obligations apply.
Consumer account used for firm work
Symptom: a free personal account stores client files with no central administration. Fix: migrate to an approved business service, document the transfer, remove local and personal copies where required, and train staff on the approved channel.
Encrypted email treated as permanent control
Symptom: the recipient opens an attachment once and then has an ordinary copy. Fix: use a controlled viewer or portal for documents requiring continuing restrictions, and explain that technical controls cannot recall a copy already downloaded.
Portal avoidance by the client
Symptom: the client ignores invitations and asks staff to use ordinary email instead. Fix: provide simple sign-in instructions, confirm the client’s device and accessibility needs, and make a documented risk decision before using an alternate channel. The easier channel is not automatically the safer channel.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Vendor and contract due diligence
Before approving a service, ask for current documentation rather than relying on a security badge or a generic “enterprise-grade” claim. Review:
Best Value
- FIPS 140-3 Level 3 (Pending) Certified Military-Grade Security
- OS/Device Independent
- XTS-AES Hardware Encryption
- Enforced Alphanumeric PIN
- Multi-PIN (Admin and User) Option
- Encryption methods and key management for data in transit and at rest.
- MFA, single sign-on, role administration, guest controls, and emergency account recovery.
- Detailed access logs, export capability, retention, legal holds, deletion, and backup handling.
- Data location, subcontractors, incident notification timelines, and business-continuity arrangements.
- Terms governing ownership, confidentiality, support access, and return or deletion at the end of the engagement.
- Integration with the firm’s practice-management and document systems, including whether communications become part of the matter file automatically.
Encryption or a named certification does not by itself establish legal compliance. The firm remains responsible for configuration, user training, monitoring, and the fit between the service and the client’s requirements.
A practical operating policy
Write a one-page policy that names the approved portal or business workspace, the circumstances in which encrypted email is allowed, and the person responsible for exceptions. Require staff to verify recipients, use MFA, avoid public links, separate matters, and record the final communication. Include an escalation path for misdirected messages, suspicious login alerts, lost devices, and requests to bypass the approved channel.
Train with realistic scenarios: a client changes domains, an assistant needs access for one week, opposing counsel requests a large production, or a phone is shared by family members. Staff should know how to revoke a link, remove a guest, report an incident, and preserve the relevant log. Review the policy after a system change, a material incident, a new client requirement, or a change in the sensitivity of the work.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Bottom line for law firms
Use a client portal for continuing, matter-centered exchange when the firm can manage permissions and the client will use it. Use a business file-sharing workspace when controlled folders, collaboration, and administrative oversight fit the workflow. Use encrypted email when email is the practical channel and the firm has verified authentication, encryption at every relevant stage, attachment handling, and post-delivery exposure.
In every case, the secure choice is the one the firm can configure, explain, monitor, and document. A portal, workspace, or encrypted message is only a tool; reasonable confidentiality depends on the controls around it and on the people operating them.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
