How to Password Protect a Web Page

PDF download Download Article
PDF download Download Article

This wikiHow teaches you how to protect an area of your website with a username and password. The steps to password-protect a website vary depending on where your site is hosted. If you write your code on the server itself or upload code from your computer, you can password-protect a directory using a file called .htaccess. If you use an online site builder like Squarespace or Wix, you can set passwords for individual areas of the page in the admin panel. And if you're using a more advanced hosting solution that allows you to create user accounts, check with your web host for instructions.

Protecting Your Website with a Password

  • To password-protect your website, create a text file named ".htpasswd". Encrypt this file with an online tool.
  • Create another file named ".htaccess" and upload it directly to your web server. Make sure it's in the proper directory.
  • If you're using an online website builder, you can add a password to the page in its settings.
Method 1
Method 1 of 2:

Using an HTAccess File

PDF download Download Article
  1. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/6\/60\/46686-1-1.jpg\/v4-460px-46686-1-1.jpg","bigUrl":"\/images\/thumb\/6\/60\/46686-1-1.jpg\/aid46686-v4-728px-46686-1-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    This is the file in which you'll be storing the username and password combo(s) that people use to access the page. You can do this on your computer if you plan to upload it to your web server via FTP. If you can log in to your web hosting server via SSH or some other method, you can use the server's text editor to create the file—just make sure you do not store it in a folder that's accessible via the web, as it will contain sensitive password information. [1]
    • For example, let's say you want users who visit your website at https://www.wikihow.com/test to have to enter a password before they can see what's there. Let's also say you upload your web files to this location on your web server: /www/sites/www.wikihow.com . Do not put .htpasswd in that directory. Instead, put it in your home directory (eg., /usr/home/yourusername ).
    • If you don't have access to your regular non-web home directory, contact your web hosting support and tell them that you need to be able to store an .htpasswd file outside of your web directory. They'll know what you're talking about!
  2. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/5\/55\/46686-2-1.jpg\/v4-460px-46686-2-1.jpg","bigUrl":"\/images\/thumb\/5\/55\/46686-2-1.jpg\/aid46686-v4-728px-46686-2-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    Create an encrypted password at http://www.htaccesstools.com/htpasswd-generator . Storing passwords in plain text is unsafe, so you'll need to use an online encryption tool to create a password. [2] Here's what you'll do:
    • Enter a username into the "Username" field. This is the name the person or people accessing the site will enter when logging in.
    • Enter a password for this username.
    • Click Create .htpasswd file .
    • You'll now see the username and encrypted password separated by a colon. For example, if you entered wikihow as the username and badpassword as the password, you'd see: wikihow:$apr1$k7iNRs8E$jL98Y2BEGl2qaF61PuiJ/1 .
    • Highlight the entire line with the mouse, right-click the highlighted text, and then click Copy .
    • The encrypted password is not the password the user will enter to access the site. They'll enter the plain text version. The encryption is only for the server end.
    Advertisement
  3. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/8\/87\/46686-3-1.jpg\/v4-460px-46686-3-1.jpg","bigUrl":"\/images\/thumb\/8\/87\/46686-3-1.jpg\/aid46686-v4-728px-46686-3-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    You can do this by right-clicking the first line of the blank file and selecting Paste .
    • The .htpasswd file can contain multiple usernames and passwords. Just put each new username and password combo on its own line.
  4. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/7\/73\/46686-4-1.jpg\/v4-460px-46686-4-1.jpg","bigUrl":"\/images\/thumb\/7\/73\/46686-4-1.jpg\/aid46686-v4-728px-46686-4-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    If you created the file on your computer, upload it to your server now. Again, don't store it in a directory that's accessible on the web.
  5. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/b\/bf\/46686-5-1.jpg\/v4-460px-46686-5-1.jpg","bigUrl":"\/images\/thumb\/b\/bf\/46686-5-1.jpg\/aid46686-v4-728px-46686-5-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    As with the previous file, you can do this on your computer if you plan to upload it to your web server via FTP, or directly on your web server. Unlike the .htpasswd file, .htaccess must be stored in the directory you want to password-protect.
    • For example, if you want to protect https://www.wikihow.com/test with a password, place the .htaccess file in the /test/ subfolder (e.g., /www/sites/www.wikihow.com/test/ .
  6. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/9\/92\/46686-6-1.jpg\/v4-460px-46686-6-1.jpg","bigUrl":"\/images\/thumb\/9\/92\/46686-6-1.jpg\/aid46686-v4-728px-46686-6-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    The sample code below assumes that your .htpasswd file is stored in a directory called /usr/home/yourusername . Replace that path with the actual path to your .htpasswd file. 
    AuthType Basic
AuthName "Protected Site"
AuthUserFile /usr/home/yourusername/.htpasswd
require valid-user
  7. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/7\/78\/46686-7-1.jpg\/v4-460px-46686-7-1.jpg","bigUrl":"\/images\/thumb\/7\/78\/46686-7-1.jpg\/aid46686-v4-728px-46686-7-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    If you created the files on the server, you're done. If you edited this file on your computer, upload it to the directory you want to password protect now.
  8. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/e\/e5\/46686-8-1.jpg\/v4-460px-46686-8-1.jpg","bigUrl":"\/images\/thumb\/e\/e5\/46686-8-1.jpg\/aid46686-v4-728px-46686-8-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    When you visit the protected page in your browser, you'll be asked to log in. Enter the username and password (not the encrypted version—the regular one) to log in. Try both incorrect and correct passwords to see what happens.
    9. Advertisement
Method 2
Method 2 of 2:

Using an Online Site Builder

PDF download Download Article
  1. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/f\/f7\/46686-9-1.jpg\/v4-460px-46686-9-1.jpg","bigUrl":"\/images\/thumb\/f\/f7\/46686-9-1.jpg\/aid46686-v4-728px-46686-9-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    If you edit your website through an online site builder like Squarespace or Wix, you can use your site editor to password-protect areas of your website.
    • Some services may require you to upgrade to a higher tier for password-protection. Other sites may not offer password-protection at all.
    • The steps to create a password for your website varies by host.
  2. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/d\/df\/46686-10-1.jpg\/v4-460px-46686-10-1.jpg","bigUrl":"\/images\/thumb\/d\/df\/46686-10-1.jpg\/aid46686-v4-728px-46686-10-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    In most cases, this will be in a section called Pages . [3]
    • Unless you want to password-protect your entire website, don't choose the home/index page. If you only want to password-protect a certain page, make sure you navigate to that page in the editor now.
    • If you want to require a password for accessing a specific blog post, such as on Wordpress.com, you'll find the password settings on the New Post page. [4]
  3. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/c\/c7\/46686-11-1.jpg\/v4-460px-46686-11-1.jpg","bigUrl":"\/images\/thumb\/c\/c7\/46686-11-1.jpg\/aid46686-v4-728px-46686-11-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    For example, if you're using Squarespace, click or tap the menu at the top-right corner to open your settings. If you're on Wix, click the three-dot menu and select Settings . [5]
  4. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/6\/69\/46686-12-1.jpg\/v4-460px-46686-12-1.jpg","bigUrl":"\/images\/thumb\/6\/69\/46686-12-1.jpg\/aid46686-v4-728px-46686-12-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    Some sites require you to toggle on a switch or check a box to adjust the page's visibility, but others just need you to enter a password.
    • If you use Wix, click the Permissions tab and select Password Holders , and then enter a password.
    • If you use Squarespace, just type a password into the "Password" blank.
  5. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/7\/71\/46686-13-1.jpg\/v4-460px-46686-13-1.jpg","bigUrl":"\/images\/thumb\/7\/71\/46686-13-1.jpg\/aid46686-v4-728px-46686-13-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
  6. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/8\/83\/46686-14-1.jpg\/v4-460px-46686-14-1.jpg","bigUrl":"\/images\/thumb\/8\/83\/46686-14-1.jpg\/aid46686-v4-728px-46686-14-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    After you've protected your page, test it out by visiting the protected URL in your own browser. Try both incorrect and correct passwords to see what happens.
  7. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/1\/1b\/46686-15-1.jpg\/v4-460px-46686-15-1.jpg","bigUrl":"\/images\/thumb\/1\/1b\/46686-15-1.jpg\/aid46686-v4-728px-46686-15-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>Image by: Uploader<br>\nLicense: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/\">Creative Commons<\/a>\n<\/p><\/div>"}
    If you're not sure where to find the password settings or you're running into trouble, check the host's support site or contact their support team. Most web hosts are run by experienced webmasters who would be happy to help you get your site protected.
    8. Advertisement

Community Q&A

Search
Add New Question
  • Question
    Is there a way to set up automatic access to a password protected page for someone who subscribes to a membership and pays a fee?
    Community Answer
    That would be very advanced and you would need to be great at php or node.js (server side stuff).
    Thanks! We're glad this was helpful.
    Thank you for your feedback.
    If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow
    Yes No
    Not Helpful 4 Helpful 17
  • Question
    How can I edit the look of the button? Not the text, but the actual font color and background.
    Jordan Dunton
    Community Answer
    You can add a class or ID to the element and use CSS to customize the input form.
    Thanks! We're glad this was helpful.
    Thank you for your feedback.
    If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow
    Yes No
    Not Helpful 3 Helpful 15
  • Question
    How can I do this with HTML instead of JavasScript?
    Community Answer
    That is not possible. HTML is readable to everyone, so it won't work. Try to do it with HTCACCESS and HTCPASSWORD files.
    Thanks! We're glad this was helpful.
    Thank you for your feedback.
    If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow
    Yes No
    Not Helpful 11 Helpful 20
See more answers
Ask a Question
200 characters left
Include your email address to get a message when this question is answered.
Submit
      Advertisement

      Video

      Tips

      • Test out your password protection. Try to break into it, or have a friend with hacking/programming experience try to break in.
        Thanks
      • Make sure you understand as much as possible about how your password protection works so that you can identify any holes.
        Thanks
      Submit a Tip
      All tip submissions are carefully reviewed before being published
      Submit
      Thanks for submitting a tip for review!
      Advertisement

      Warnings

      • If you are an inexperienced webmaster, do not trust important data with your password protection scheme. Many simple/common password protection techniques on the internet are vulnerable to experienced hackers.
        Thanks
      Advertisement

      You Might Also Like

      How to
      Clear Your Browser's Cookies
      How to Block Cookies in Chrome, Safari, & More
      How to
      Access Blocked Websites
      4 Ways to Block Porn on Android from Websites and Apps
      4 Simple Ways to View Cookies in a Web Browser
      How to Install an SSL Certificate on a Server
      How to
      Open Incognito Mode by Default in Google Chrome (Windows)
      How to
      Hack a Computer
      How to
      Block a Program with Windows Firewall
      How to
      Verify a PGP Signature
      How to
      Delete Tracking Cookies
      How to
      Keep Your Address Private
      How to Delete a Ring Account & Cancel Ring Protect
      How to Be Anonymous Online: 15 Privacy-Boosting Tricks
      Advertisement

      References

      1. ↑ https://www.yourhtmlsource.com/sitemanagement/passwordprotection.html
      2. ↑ https://www.askapache.com/online-tools/htpasswd-generator/
      3. ↑ https://support.squarespace.com/hc/en-us/articles/205814618-Page-passwords
      4. ↑ https://kinsta.com/blog/password-protect-wordpress-site/
      5. ↑ https://support.wix.com/en/article/password-protecting-your-site-or-a-specific-page

      About This Article

      Article Summary X

      1. Log in to your site's web editor.
      2. Go to the Pages area.
      3. Select a page to protect.
      4. Open the page's settings.
      5. Enable the password feature.
      6. Set a password.
      7. Save your changes.

      Did this summary help you?
      In other languages
      Thanks to all authors for creating a page that has been read 823,344 times.

      Is this article up to date?

      Advertisement