Security and access

Embedded Figma files and prototypes respect the sharing settings of the file.

• If the file is password protected, the viewer is prompted for the password.
• If the file is shared within an organization, the viewer needs to log in to access the file.
• If the file isn't explicitly shared with the viewer, or the file is shared publicly, access to the file is based on the file's link sharing settings.

This ensures that the viewer has permission to access the file before the embed loads and renders.

Because embeds use iframes, embeds also benefit from the security features in browsers, such as enforcement of same-origin policy.