Password Protection

Password protection lets you require visitors to enter a password before accessing specific pages on your site. It is disabled by default and only applies to the URLs you choose to protect.

How it works

1. Navigate to Protect Pages > Password in the sidebar.
2. Enter the URL path you want to protect (e.g., /admin, /wp-admin, /login.php).
3. Click Protect Page.
4. A random password is generated automatically for the protected path.

Passwords are hidden by default — click Click to reveal to view a page’s password.

Important

• Each protected path gets its own unique generated password.
• Save the password when it is created. You will need to share it with authorized visitors.
• Removing protection from a page deletes the password permanently.
• Password protection applies at the WAF level, before requests reach your origin server.