How to Password Protect Shared HTML Pages

Sometimes you need to share HTML content privately. RunThis.page lets you set a password on any page so only people who know the password can view it. Available on Pro and Business plans.

Password protection runs at the edge — visitors see a fast, clean password form before the page loads. No viewer account is needed. Just share the URL and the password separately.

Step-by-step: Password protect a page

1. 1

   Upload your page

   Sign up and upload an HTML file from your dashboard, or use the API.

2. 2

   Set a password in page settings

   Open the page detail view and find the "Password Protection" section. Enter your chosen password and save.

3. 3

   Share the URL and password separately

   Send the page URL and the password through different channels for better security — URL in email, password via Slack, for example.

What visitors see

When someone visits a password-protected page, they see a clean password form. They enter the password, and if correct, they get access for 24 hours via a secure cookie. No account needed.

Wrong passwords show a clear error. The password check happens at the edge (Cloudflare Worker), so it's fast worldwide and the HTML content is never exposed until the correct password is entered.

Use cases

• Client deliverables — share HTML reports or dashboards privately with specific clients
• Internal team dashboards — restrict access to internal data visualizations
• Draft reviews — let reviewers see work-in-progress before public release
• Gated content — share premium or exclusive HTML content with select people

Plan limits

• Pro ($30/mo) — password protect up to 10 pages
• Business ($50/mo) — password protect all pages, no limit

You can change or remove the password at any time from the page settings. Removing the password makes the page public again immediately.

Why RunThis.page for private sharing?

• ✓ Edge-verified — password check runs at Cloudflare's edge, so it's fast globally and the content is never exposed.
• ✓ No viewer account needed — anyone with the password can access the page. No signups, no friction.
• ✓ Easy to manage — set, change, or remove passwords from your dashboard or via the API.
• ✓ Secure by design — passwords are HMAC-hashed, not stored in plain text. Cookie-based sessions expire after 24 hours.

Password protection works great for private data dashboards, portfolio pieces, and any content you want to share with a limited audience.