Typeform's default share image is Access Denied

og:image on a typeform ends in /image/default, and the file behind it returns 403. The forms are beautiful. The card is a locked placeholder with a sentence selling Typeform under it.

typeform.com

So the designed form shares with a forbidden picture

The product's whole pitch is the experience. The card points at a file nobody is allowed to see.

tfsales.typeform.com
T

What's actually wrong

Typeform sells the idea that a form can feel designed. Then it ships the link with og:image pointing at a platform-wide asset whose path ends in /image/default, and when we fetched that asset the CDN answered 403 AccessDenied. As a browser, as Facebook's crawler, as WhatsApp's: denied every time. og:description is Typeform's own tagline, "Turn data collection into an experience with Typeform." The form's title makes it into og:title and nothing else does. There's no twitter:image. A per-form upload exists under the Share menu, and forms where the owner found it do get a working image. Users keep posting that they can't find it, and the ones who don't share a card whose picture is forbidden.

This is problem 5 of the 5 ways link previews break. The full breakdown covers the manual fix and the automatic one.

og:image       → public-assets.typeform.com/public/admin/2VWurKeiR4R7.png/image/default
GET og:image   → 403 <Code>AccessDenied</Code>, as browser, facebookexternalhit, and WhatsApp
og:description → "Turn data collection into an experience with Typeform…"
twitter:image  → (none)
same forbidden default on tfsales.typeform.com/to/PxcVKQGb, form.typeform.com/to/vCjXNb, survey.typeform.com/to/deXwCxhW

What that costs downstream

The brand that sells design shares a default

Typeform's forms look better than anyone's. The link preview is the first thing a respondent sees, and it's the one surface left on factory settings.

The respondent reads an ad instead of the question

og:description is Typeform's tagline on every form. The person who was asked to fill out a survey about their hospital stay sees "Try it for FREE."

The manual fix is invisible

"I get a very generic thumbnail" has 2,768 views on Typeform's community. In 2024 a user wrote that they could no longer find the option at all. In October 2024 another described "a black box with 'Typeform' in it" on LinkedIn.

The question, as a card

The form's own title, its first question, and its look, rendered from the page.

Contact Typeform Sales
typeform.com
T

Every typeform, the same default

Different forms on different subdomains. One placeholder.

A booking survey in Slack

Posted to the team channel to collect everyone's answers.

Booking Survey
Fixed by OpenGraph+
form.typeform.com
Today the default is 403

A contact form on WhatsApp

Sent to customers one at a time.

OES Contact Form
typeform.com
Fixed by OpenGraph+
survey.typeform.com
Today the same default is 403

For whoever owns the templates

The default is locked

An asset path that ends in /image/default is the share-image step skipped. This one also answers 403, so the skipped step ships a broken picture.

GET …/2VWurKeiR4R7.png/image/default → 403 AccessDenied

The description sells Typeform, not the form

og:description is the company tagline on every form. The respondent's first read of the survey is an ad for the tool it was built in.

One tag on typeform.com fixes every form

OpenGraph+ renders the card from the form's own first screen. Typeform adds one meta tag, and every form shares as itself.

Is your site doing this too?

Run the same check we ran on Typeform: every platform, every page we can find, free.