Restrict access to sites

Control who can view your published site with three visibility modes:

No authentication

Allow anyone with the internet to access your site.

Password

Require a preset password for basic access control.

Login with Atlassian

Control who can login using their Atlassian account.

#Public

The default mode - anyone with the URL can view the site. No authentication required.

#Password-protected

Protect your site with a shared password. Visitors must enter the password to access the site.

• Passwords are securely hashed on the server and never stored in plaintext

• Failed login attempts are rate-limited (max 10 attempts per 15-minute window)

• Session duration is configurable (1–720 hours, default 24 hours)

#Login with Atlassian (Single Sign-On)

Restrict access to users who authenticate through your identity provider.