# Password-protect a Confluence site

To password-protect a Confluence site published with Capable Sites, open the site's **Settings**, choose **Access**, select the **Password** card, type a shared password of at least 8 characters and select **Save changes**. Protection applies straight away to the live site and its staging previews, with no deploy. Visitors type the password once per session.

---

## Before you start

* You need to be a Confluence admin to switch a site to Password. A site collaborator can change the password once the site already uses it.
* Decide how you will share the password. Everyone uses the same one, and there are no per-visitor accounts.

---

## Steps

1. Open Capable, choose **Sites**, and open your site.
2. Select **Settings**, then the **Access** card.
3. Under **Who can view this site**, select **Password**.
4. In **Password**, type a password of at least 8 characters.
5. Under **Sessions**, choose how long visitors stay signed in with **Stay signed in for**.
6. Select **Save changes**.
7. Open the site in a private browser window and check that it asks for the password.

---

## What happens next

Every page now opens on a sign-in page with your site's name, a **Password** box and a **Sign in** button. After 10 wrong attempts from one network in 15 minutes, that network has to wait.

To change the password later, type it in **New password** and save. Leave the field blank to keep the current one. A new password signs everyone out, so they need the new one straight away.

If **Save changes** stays greyed out, hover over it. It tells you what is missing, such as **Password must be at least 8 characters**.

---

## Related

### [Access modes](https://help.gocapable.com/sites/access-modes.html)

All five modes and sessions.

### [Restrict access to sites](https://help.gocapable.com/sites/restrict-access-to-sites.html)

Password rules and lockouts.

### [Restrict a published Confluence site to your company](https://help.gocapable.com/sites/restrict-a-published-confluence-site-to-your-company.html)

Sign in with work accounts instead.

### [Securing a published site](https://help.gocapable.com/sites/securing-a-published-site.html)

More guides for protected sites.

---

_One password, every page, no deploy._