Password Protect a Directory
Last updated
Last updated
Password protection can take up to 2 hours to go into effect as it requires an Apache restart.
We recommend you ensure that password protection is in place before uploading any sensitive files.
Navigate to:
Login > Plesk > Websites & Domains > [ domain ] > Password-Protected-Directories
Click the Add Protected Directory button and enter the details below:
In the Directory name field, enter the path, relative to your domain root directory, to the directory you want to protect.
Your domain root directory is httpdocs (if you were transferred from the old cPanel it will be called public_html).
The specified directory will be created if it does not already exist.
Optionally, add a directory title in the Title of the protected area field.
Click the Create button.
You should see a confirmation message that says: Protected directory / [directory] was successfully created.
The directory will appear in the list of your domain's protected directories.
To access the protected directory, it must have at least one user associated with it. To add a user, click on the directory name:
Click on the Add User button.
Enter a Username and Password for the new user, and click on the Create button.
You should see a confirmation message that says: The protected directory user [username] was created.
The user will appear in the list of the protected directory's users.
To add more users, click the Add User button and repeat the above steps. To change the password of an existing user, click on the key image.
Since directory listing is not enabled, there must be at least one file inside the password protected directory, or else a 403 Forbidden error will result.
Using Plesk's File Manager or your preferred method of uploading files, navigate to httpdocs/protected-files (or public_html/protected-files if you were transferred from the old cPanel), and add your file(s).
For testing purposes, you could create a file called test.html and paste in the content below:
Password protection can take up to 2 hours to go into effect as it requires an Apache restart.
Within up to 2 hours of password protection being activated on your directory, navigate to domain.helioho.st/protected-files/test.html in your web browser.
Enter the Username and Password you created, and once you are signed in successfully, you should see a message that says: HelioHost rules!.
This Plesk article contains extra details and a walkthrough video which may be helpful.
