How to use Plesk to protect directories with a password

This article describes how to use Plesk to protect specific directories with a password. Visitors to password-protected directories must enter a username and password to view the directory’s contents


When you add password protection to a directory, site visitors are prompted for a username and password when they try to access it. They can only view the directory contents after typing a valid username and password.

To add password protection to a directory, follow these steps:

  1. Log in to Plesk.
  2. In the left sidebar, click Websites & Domains:

    Plesk - Sidebar - Websites and Domains

  3. Click the Password-Protected Directories icon.
  4. Under Tools, click Add Protected Directory.
  5. Under Settings, in the Directory name text box, type the name of the directory you want to protect.
  6. In the Title of the protected area text box, you can optionally type a name for the protected directory.
  7. Click OK.
  8. Under Protected directories, click the name of the directory you specified in step 5.
  9. Under Tools, click Add a User.
  10. Under Protected directory user, in the Username text box, type a name for the user.
  11. In the New Password and Confirm Password text boxes, type the user’s password.
  12. Click OK. Password protection is now enabled for the directory.


You can remove password protection from a directory if you no longer want to protect it with a password. To do this, follow these steps:

  1. Log in to Plesk
  2. Locate the directory for which you want to remove password protection, and then select the check box to the left of the directory name.
  3. Click Remove Protection.
  4. On the Removal Confirmation page, select the Confirm removal check box.
  5. Click OK. Plesk removes password protection for the directory.