You send a share link to a chatbot conversation so someone can see the draft it helped you write, and you don't stop to think who else might land on that same link. Most of the time that's fine. The one time it isn't, is enough for someone to see a loan application, a revenue review, or a company's whole vacation calendar.
Here's what you get: what actually happened with Meta's Muse sharing feature, three checks to run before you share any AI chat link, and what's safe to share without worrying.
Start with the basic idea. "Shareable" doesn't mean "private". The moment a link has a fixed address on the internet, there's a chance it reaches someone who never got it from you, through a search engine, a public DNS record, or just someone forwarding it along. A link doesn't need to leak for this to happen, it just needs to be guessable.
Security firm Claroc found this out the hard way. It discovered that 6,800 Muse share links were built from the conversation's title plus a random ID, hosted under one fixed domain, which made them reachable through public DNS records with no password at all. Among what it found: a small business loan application, a marketing company's internal revenue review, and a bank fraud alert with partial account details. Meta paused the feature after reporters asked about it.
Step 1: Check what you're actually sharing
Before you hit share, read the conversation itself. Does it name a client, a dollar figure, an employee detail, or anything you wouldn't say in public? If so, that's not a link to share, it's a conversation to clean up before you save it anywhere.
Step 2: Check whether the tool says "private" or just "anyone with the link"
In any AI tool you share from, there's a difference between "anyone with the link" and "private, requires login". Look for that distinction in the sharing settings of whatever tool you're using, don't assume they're the same thing.
Step 3: Open the link yourself, logged out
Open the link in a different browser or a private window, logged out of your account. That's what anyone who gets the link, or stumbles onto it, actually sees. If there's more there than you expected, turn the share off.
That phrasing matters, because it asks for a short, specific message, not a policy document nobody will read.
Next ten minutes: pull up the AI chat share links you've already sent this month, from any tool, and check them one by one for anything that shouldn't be open to a stranger.