How to Password Protect a Folder on Your Website

What does this do?

A directory is just a folder. When you protect a folder, the browser shows a small login box. Visitors must type the right user name and password to see anything inside. This is useful for a test site, private files or an admin area.

The feature is in cPanel, a control panel for hosting accounts. Ask Hostvento support if cPanel is part of your plan.

Steps in cPanel

1. Log in to cPanel using the details in your welcome email.
2. Find the Files section, or the Security section on some themes.

   

3. Click Directory Privacy.
4. If a box asks which folder to start in, choose the Web Root and click Go.
5. Click the folder name you want to protect.
6. Tick Password protect this directory.
7. Type a name for the folder in the box. This name shows in the login box. Click Save.
8. Under Create User, type a user name.
9. Type a strong password, or click Password Generator.
10. Click Save.

Test it

Open the folder's web address in a private browser window. A login box should appear. Type the user and password you made. If the right login opens the page, it works.

Add or remove users

1. Go back to Directory Privacy and open the folder.
2. Add another user under Create User.
3. To remove one, choose Delete next to the user name.
4. To remove all protection, untick Password protect this directory and click Save.

   

How it works behind the scenes

cPanel adds two hidden files. One is .htaccess in the folder. The other is .htpasswd, a list of users and scrambled passwords, stored outside the public web folder.

Warning: Do not delete these files by hand unless you know what you are doing. Use Directory Privacy to change them.

Quick recap

• Directory Privacy in cPanel adds a login to a folder.
• Pick the folder, tick the box, name it and create a user.
• Test in a private window.
• Untick the box to remove protection.