How to Fix SharePoint “External Sharing” Link Expiry Errors

When external partners, contractors, or clients attempt to open a shared SharePoint document and receive a message stating “This link has expired” or “Access Denied: Link is no longer active,” the sharing link has reached its mandatory time limit. This occurs because the link hit a site-level expiration threshold, a tenant-wide security policy, or an explicit expiration date set during link creation.

Fast Fix

Generate a new sharing link via Share > Copy link, select Specific people, and input the external recipient’s email address directly. If tenant policies enforce mandatory expiration on all external links, a SharePoint Administrator must adjust the These links must expire within this many days setting under Policies > Sharing in the SharePoint Admin Center.

---

Diagnostic Snapshot

Indicator	Details
Error Message	“This link has expired” or “The link you are trying to access is no longer active.”
Primary Root Cause	Tenant-level mandatory expiration policy or manual date set on an “Anyone” link
Scope	External guest accounts, vendors, and unauthenticated public links
Administrative Layer	SharePoint Admin Center / Microsoft Entra External ID Governance

---

Why External Sharing Links Expire

SharePoint Online provides several methods for external collaboration, and each behaves differently regarding lifespans:

• “Anyone” Links (Anonymous): These links do not require authentication. Because they present a security risk if forwarded, Microsoft 365 allows administrators to enforce mandatory expiration periods (typically 30, 60, or 90 days). Once the counter runs out, the underlying URL token is permanently revoked by SharePoint.
• “Specific People” Links (Authenticated Guests): These links require external users to verify their identity with a one-time passcode (OTP) or an Entra B2B guest account. While less frequently subject to hard link expirations, their access can still be cut off by Microsoft Entra Guest Access Reviews or site-level guest expiration policies.
• Site-Level Overrides: A single SharePoint site can enforce expiration rules that are significantly stricter than the tenant default. For example, a tenant may allow 90-day links, but a high-security site collection might force external links to expire every 7 days.

[User Shares Document Externally] ──> Selects "Anyone" or "Specific People"
                                                    │
                                                    ▼
                                   [Tenant / Site Expiry Counter Starts]
                                                    │
                   ┌────────────────────────────────┴────────────────────────────────┐
                   ▼                                                                 ▼
           [Within Lifespan]                                                 [Lifespan Exceeded]
       File opens successfully.                                          Link token revoked;
                                                                         "This link has expired."

If links fail because of moved files rather than expiration rules, refer to [INTERNAL LINK: S01C03.15 – How to Fix “Broken Links” in SharePoint Document Libraries].

---

Progressive Action Steps

1. Regenerate an Authenticated Sharing Link

The fastest way to restore access for a collaborator without adjusting global security policies is to issue an authenticated link.

1. Navigate to the document library in SharePoint Online.
2. Select the file, click the Share button, and click the gear icon (Link settings).
3. Switch from Anyone to Specific people.
4. Type the external collaborator’s full email address.
5. Set permissions to Can edit or Can view.
6. Click Apply, then click Copy link and send it directly to the recipient.
7. Why this works: “Specific people” links rely on user identity rather than anonymous tokens, bypassing standard anonymous expiration timers on many tenant configurations.

If link creation throws general sharing errors, review “Something went wrong” when Sharing a File in Teams.

2. Adjust Tenant-Wide Link Expiration Policies (Admin)

If entire teams are disrupted by links expiring too quickly, a SharePoint Administrator can extend or remove the global expiration cap.

1. Log in to the SharePoint Admin Center (https://[tenant]-admin.sharepoint.com).
2. In the left navigation pane, select Policies > Sharing.
3. Under More external sharing settings, locate the setting labeled:
   • These links must expire within this many days
4. Increase the day limit (e.g., from 30 to 90 or 180), or uncheck the box entirely if organizational compliance permits permanent links.
5. Click Save at the bottom of the page.

SharePoint Admin Center > Policies > Sharing:
├── [x] Anyone links can be used
└── [x] These links must expire within this many days: [ 90 ] <── Extend or uncheck

3. Update Site-Specific Expiration via PowerShell

If the tenant setting is generous but a specific site collection continues revoking links prematurely, an administrator must check the site-level properties via the SharePoint Online Management Shell.

1. Open PowerShell as Administrator and connect to your tenant: Connect-SPOService -Url <https://yourtenant-admin.sharepoint.com>
2. Inspect the current expiration setting on the target site collection: Get-SPOSite -Identity <https://yourtenant.sharepoint.com/sites/PartnerSite> | Select AnyoneLinkTrackStatus, OverrideTenantAnonymousLinkExpirationPolicy, AnonymousLinkExpirationInDays
3. Update the site’s expiration ceiling to match tenant policy: Set-SPOSite -Identity <https://yourtenant.sharepoint.com/sites/PartnerSite> -OverrideTenantAnonymousLinkExpirationPolicy $false
4. Or define a larger site-specific limit: Set-SPOSite -Identity <https://yourtenant.sharepoint.com/sites/PartnerSite> -OverrideTenantAnonymousLinkExpirationPolicy $true -AnonymousLinkExpirationInDays 120

4. Audit Microsoft Entra ID Guest Access Reviews

If external users lose access to files even though sharing links were configured without expiration, their entire external identity may have expired in Microsoft Entra ID.

• In corporate environments, security teams configure Access Reviews requiring internal sponsors to confirm whether contractors still require access every 30 or 90 days.
• If a sponsor ignores the automated review email, Entra ID automatically revokes the guest account’s active tokens across all SharePoint sites.
• An administrator can check Microsoft Entra admin center > Identity Governance > Access Reviews to see if the user was flagged for removal.

For organizations collaborating across corporate borders via federated teams, compare these behaviors with How to Fix Teams “Shared Channels” File Access Issues.

---

Hidden Problem: Purview Sensitivity Label Timers

If external links expire reliably after a specific number of days, but all SharePoint sharing settings show expiration is disabled, check the file’s Microsoft Purview Sensitivity Label.

Security administrators can configure sensitivity labels with an encryption condition called Offline access and content expiration. If a label specifies that content access expires 30 days after application, the document will lock external users out regardless of how the SharePoint sharing link was created. For remediation steps, see Resolving “Sensitivity Label” Access Denied in Teams/SharePoint.