Custom Branding

Custom branding replaces CredenShare's presentation on the pages your recipients open. It requires the custom_branding entitlement, which is on Business and Enterprise only.

Where to set it

There are two scopes, and they use the same editor.

Both entry points are hidden when you cannot use them. The team's Custom branding card is shown only to an owner or admin on a plan that has the feature, and the personal Branding tab appears only on a plan that has it. Opening the team branding page directly gives the reason instead: "Custom branding is a Business plan feature" without the plan, or "Admin or Owner only" with the plan but the wrong role.

When a recipient opens a link, branding is resolved in this order:

1. If the share or request was created in a team context, the team's branding is used.
2. If the team has none — or the item was created in personal context — the creator's personal branding is used.
3. If neither is set, the recipient sees standard CredenShare presentation.

Shares created anonymously — including from the marketing homepage widget — are never branded.

What branding replaces

Branding applies to the recipient share view (/<short code>) and the Secure Request submission page (/r/<short code>). It does not apply to the public secure-paste page.

Logo and favicon uploads

Each image field has a drop zone — "Drag a logo here, or click to choose" on the two logo fields, "Drag a favicon here, or click to choose" on the favicon field — and, underneath it, a plain text box where you can paste a URL instead. Both write to the same field, so you can host the file yourself if you prefer.

Uploads go to a CredenShare-managed bucket and come back as a public URL that is stored in your branding settings. Anyone who has that URL can fetch the image, so do not upload anything you would not publish.

• Size limit: 1 MiB. Larger files are rejected before upload with "Image too large".
• Formats the server accepts: PNG, JPG and ICO.

If you paste a URL rather than uploading, the recipient's browser fetches that URL directly. Host it somewhere public and stable — a link that later breaks leaves the branded page with a missing image.

Colours

Four colour fields, each with a swatch picker and a hex box:

• Primary color (dark mode) — defaults to #7c3aed
• Primary color (light mode) — optional, falls back to the dark value
• Secondary color (dark mode) — optional
• Secondary color (light mode) — optional

Only the primary colour reaches the recipient. The panel gradient always runs from your primary colour into a fixed dark blue, and the same colour tints the carousel icons, the active position dot and the primary button. A value that is not a valid hex, rgb() or hsl() colour is discarded and #7c3aed is used instead.

There is no domain setting. Links keep the CredenShare short-link domain (crs.sh); custom or vanity domains are not offered.

Panel content and the bottom card

The marketing panel copy is editable, with these caps:

Every cap except the description is enforced by the input: it stops accepting characters at the limit. The description's 500 is a counter — it goes amber near the limit and red past it, but nothing stops you typing or saving beyond it.

The sidebar description accepts Markdown — bold, italic, links, lists, inline code, headings and blockquotes. Raw HTML, images and iframes are stripped.

There are four feature cards, each with an on/off switch, a title, a description and an icon chosen from a fixed list. Any field you leave empty falls back to CredenShare's default for that slot, so a half-filled card still shows CredenShare copy. The defaults are "End-to-End AES-256 Encryption", "Team Collaboration", "Self-Destructing Shares" and "14+ Developer Security Tools". Turning all four cards off does not empty the carousel — it falls back to the full CredenShare default set. Leave at least one card enabled with your own copy if you want CredenShare's wording gone.

The bottom card behaves differently on a Business or Enterprise account: those plans already suppress CredenShare's recipient-facing call-to-action, so no bottom card is shown until you fill in one of the bottom-card fields. Filling any of them makes the card appear with your values, and the fields you left empty fall back to CredenShare's defaults. Setting the toggle to "Bottom card is hidden" keeps it suppressed.

Turning branding on and off

A banner at the top of the editor toggles between "Branding is active" and "Branding is paused". Paused keeps everything you have entered but shows recipients the standard CredenShare presentation, so you can build the configuration before exposing it. The toggle, like every other field, only takes effect when you save.

Changes take effect on existing links as well as new ones. Branding is read from your current settings each time a recipient opens a link, so pausing branding, editing copy or swapping a logo changes pages that were already sent. The note in the editor saying that changes apply only to shares created after saving is out of date.

Save branding stays disabled until at least one field is filled in. Changing only the dark-mode primary colour, the gradient toggle or the active/paused switch is not enough — set a display title, a logo, or any other field as well. Reset to default appears once branding has been saved as active; it clears the stored branding and returns recipients to CredenShare presentation.

What the recipient sees

The layout does not change. A branded page is the same two-column recipient view with your values substituted where CredenShare's normally sit. This is a re-skin, not a full white-label — the following are not replaced, on any plan:

• The footer. "Terms of Service · Privacy Policy · Support" — the first two open CredenShare's legal pages, Support is a mailto: to support@credenshare.io — above the copyright line © <year> CredenShare Inc. All rights reserved.
• The attribution link. The marketing panel keeps a "Powered by CredenShare" button linking to credenshare.io.
• The trust badges at the foot of the panel: "AES-256", "Zero-Knowledge Capable", "GDPR Compliant".
• The theme switcher in the page header.
• The link itself. The URL the recipient clicks is a CredenShare domain.
• The share mechanics. The password prompt, the view-limit and expiry messages, and the error pages all use CredenShare's wording. The one exception is that when a Redirect URL on delete is set, a recipient who reaches an expired, timed-out or deleted share is sent to that URL instead of seeing the expiry page.

Your logo, title, favicon, primary colour, panel copy and call-to-action are yours. Everything above stays. If the CredenShare name has to be absent from the recipient's page entirely, this feature does not do that.

One more thing to set deliberately: the panel's primary button only becomes yours when you fill in Redirect URL on delete. Leave it empty and the panel keeps CredenShare's own buttons — "Create Free Account" and "Login" for a signed-out recipient, "Back to Dashboard" for a signed-in one.

Related

• Key Concepts — how shares, expiry and view limits behave
• Encryption — what is encrypted and where