Password-protect a status page

A private status page asks visitors for a password before it shows anything. Use it for a client-specific page, an internal service or a page you are not ready to make public. Password-protected pages are a Team plan feature.

Turn on password protection

1. Go to Status pages and open the page.
2. Scroll to Access control. It shows Public or Password protected.
3. Under Who can view this page, choose Only people who know the password.
4. Enter a Password of 10 to 200 characters. A passphrase of a few words is easy to share and hard to guess.
5. Choose Save access.

What visitors see

• Visitors enter the password once per browser. It stays unlocked for 12 hours, then they enter it again.
• After 10 wrong attempts within 15 minutes from one network, further attempts are refused for a while.
• Private pages are never cached, and the subscribe form only works after unlocking.
• The Preview panel in the dashboard cannot show a private page; use Open in the Public link panel and enter the password.

Change the password or make the page public

To rotate the password, enter a New password and choose Save access. Everyone who unlocked the page with the old password must enter the new one. To remove protection, choose Anyone with the link and Save access.

With a custom domain

Password protection also applies when the page is served on your custom domain.

Troubleshooting

• The option is greyed out: the workspace is not on Team. An upgrade hint is shown in the panel.
• "Private pages need a password of 10–200 characters": choose a longer password.
• A viewer is asked for the password again: the 12-hour unlock expired, the password was changed, or they use a different browser.