Password-protect your storefront

Sometimes the store shouldn't be public yet. Two cases come up again and again: a soft launch, where you're still finishing setup and only want a few test customers booking, and a private customer list, where the store exists for corporate accounts or members and everyone else has no business in it.

The answer is one shared password for the whole store. Not accounts, not invites. One password you hand out, that visitors enter once and then stay signed in with for 30 days.

Set it

1. Go to Settings › Preferences › Password protection.

2. Enter a New password and Confirm password. It needs at least 8 characters and 72 or fewer. Spaces count, so a phrase like green totes 2026 works fine.

3. Click Save password. The status chip reads Updated with the date, and the store is locked from that moment.

Only owners and managers can set or change the password. Office staff can see the status but not touch it.

Turn it off

1. Go back to Settings › Preferences › Password protection.

2. Click Turn off password protection, then Confirm: Make store public.

The status chip reads Disabled with the date. The store is public again immediately.

What visitors see

A locked store shows a page with your store name and the line "This store is password protected," plus a password field. Nothing else is visible: no catalog, no prices, no booking. A wrong password gets them "That didn't work. Check the password and try again."

Once they enter it, they stay signed in for 30 days and browse normally.

When to change the password

Changing the password signs out everyone who entered the old one. They have to enter the new one to get back in. Do this when a password leaks to the wrong people, when a test customer becomes a regular one, or when your private list changes. The honest tradeoff: it's one password per store, so rotating it affects every visitor, not just the one you meant.

The password guards the storefront only. Your team signs in to the dashboard the same way they always have; this setting doesn't touch that.

When something looks wrong

• You set the password and now you can't see your own store. Open it in a fresh browser tab and enter the password, or check Settings › Preferences › Password protection to confirm it's on. Either way, your dashboard is unaffected.
• Customers keep getting asked for the password. Either their 30 days expired, or someone changed the password after they first entered it. Send them the current one.
• The status shows Disabled with a date you don't recognize. Any owner or manager can turn it off. Ask the team before assuming it's a bug.