public access mode by default. The password
mode requires a shared password before the page renders. Use it for
internal-only or partner-only views that do not need per-customer
scoping.
Requires a Starter plan or higher.
Steps
1
Switch the page to password mode
Open the page in the console, then Access. Set:
- Mode: Password.
- Password: a shared secret you will distribute to authorised visitors.
2
Distribute the password
Share the password through the channel that already gates access
to the audience (e.g. a partner portal, an internal wiki, a signed
email).
3
Rotate the password
Open the page’s access settings and update the password. Existing
unlock cookies invalidate at rotation, and visitors must re-enter
the new password.
Behaviour
- The unlock cookie is named
observer-page-access-<page-id>. - The cookie is signed against the current password hash. Rotating the password invalidates outstanding cookies.
- Cookie lifetime is one hour. After expiry, visitors re-enter the password.
When to use a stronger modePasswords are appropriate for low-stakes gating. To give each
viewer their own sign-in that you can revoke per person, use
sign-in protected pages
(Google, Microsoft, or your own identity provider). For
per-customer views or signed JWT access, use
JWT-scoped access or
customer-scoped pages.

