Development protection

Put HTTP Basic Auth in front of a site so only people with credentials can reach it — useful for staging, UAT, or unfinished apps.

Who can use this page? Site manage — Site Actions → Development Protection.

What it does

• Requires HTTP Basic Auth for the site’s apex and WWW hosts
• Stores only a salted password hash (not plaintext)
• Generates credentials once for you to copy
• Stays ACME-safe: certificate HTTP-01 renewals are not blocked
• Leaves internal application health checks working

Enable

1. Site Actions → Development Protection
2. Turn protection on
3. Set or generate the username/password
4. Save and copy the password — it cannot be shown again in full
5. Ensure the site has HTTPS (protection expects TLS in normal use)

Disable

Turn protection off and save. Traffic reaches the application without Basic Auth again.

Tips

• Different password from the panel login
• Share credentials via a password manager, not chat

Related

• Site actions menu
• Issue a certificate