> ## Documentation Index
> Fetch the complete documentation index at: https://speedypage.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Password-protect a directory

> How to restrict access to a directory with a username and password using cPanel's Directory Privacy feature.

Directory Privacy lets you add password protection to any folder on your hosting account. When someone tries to access a protected directory through a web browser, they're prompted for a username and password before they can view the content.

This is useful for staging sites, admin areas, or any content you want to restrict to specific people.

<Note>
  This feature only protects browser (HTTP/HTTPS) access. It does not restrict access through FTP, SFTP, or other file transfer methods. For FTP access controls, see [FTP accounts](/web-hosting/ftp-accounts).
</Note>

## Set up password protection

<Steps>
  <Step title="Open Directory Privacy">
    Log in to cPanel through your [client area](https://my.speedypage.com) or at `yourdomain.com/cpanel`. Go to **Files** and click **Directory Privacy**.
  </Step>

  <Step title="Select the directory">
    Browse the folder list and click **Edit** next to the directory you want to protect. To protect a subdirectory, click the parent folder first to expand it, then click **Edit** next to the subdirectory.
  </Step>

  <Step title="Enable protection">
    Check the **Password protect this directory** box. Enter a label for the directory (this is just a display name, not the actual folder name). Click **Save**.
  </Step>

  <Step title="Create an authorized user">
    Enter a username and password for the user who should have access. Click **Save**.
  </Step>
</Steps>

Anyone visiting the protected directory in a browser will now see a login prompt. Only users you've created can access the content.

## Manage authorized users

To see all users for a protected directory, go back to **Directory Privacy**, click **Edit** next to the directory, and scroll to the **Authorized Users** section.

* **Change a password** — Enter the existing username with a new password and click **Save**.
* **Remove a user** — Select the user and click **Delete User**.

## Remove password protection

Go to **Directory Privacy**, click **Edit** next to the directory, and uncheck **Password protect this directory**. Click **Save**. The directory will be publicly accessible again.

<Tip>
  Subdirectories inherit password protection from their parent. If you protect `public_html/staging`, everything inside it is also protected without setting it up separately.
</Tip>