WhoHasAccess.com Has Shut Down — What to Use Instead
WhoHasAccess.com is gone. Its site now carries an "end of life" notice, and the service is no longer available. It ran for roughly nine years and was widely recommended — which is why links to it are still scattered across Reddit threads, help articles and university IT pages that have not been updated.
If you arrived from one of those, here is the state of things.
Read-only. Sensitive files listed first.
What WhoHasAccess did
It connected to a single Google account, scanned the sharing settings on every file and folder, and showed who could access what — then let you revoke access you no longer wanted. It was free, it deleted its collected data after the scan, and it never read file contents.
That combination is the reason people liked it: it answered a question Google still does not answer in one screen, for an individual account rather than a whole organisation.
Your options now
Do it by hand in Google Drive. In the search bar, use the People filter → "Anyone with the link" to find public files, and to:someone@example.com to find what you have shared with a specific person. This genuinely works. It is slow, it covers one item at a time, and it tells you nothing about which of the results matter.
Workspace admin tools. If you administer a Google Workspace domain, the Admin console's Drive log events, and tools built for domain-wide auditing, give you an organisation-wide view. These are built for admins and priced accordingly; most need domain-wide authority to install.
NeatDrive. Closest in shape to what WhoHasAccess did: one Google account, no admin console, a free read-only audit that lists exposed files by name, with owner, folder path and date.
What is different from WhoHasAccess:
• Sensitive files are ranked first. Files that look like tax documents, payroll, bank statements or ID are surfaced at the top when they are also exposed.
• Folder-level sharing is handled properly. When files are public because a parent folder is shared, the fix has to happen at the folder — NeatDrive shows you how many files are affected before you approve it.
• Fixing is careful. Nothing is deleted; archived files move to a NeatDrive Archive folder in your own Drive, every action is logged, and most changes can be undone.
• The audit is free; applying changes requires a paid plan. WhoHasAccess was free throughout. That is an honest difference, not a footnote.
Like WhoHasAccess, the scan reads metadata only — names, sizes, dates, owners and sharing settings — and cannot read what is inside your files.
If you only want the free part
Run the audit and act on the list yourself in Google Drive. The audit names the exposed files it finds and where they live, which is the part that takes hours by hand. Removing access in Drive after that is a few clicks per file — tedious, but free.