Who can access your app - Replit
Skip to main content
When you publish your app, you control who can open it. Choose an option under Sharing in the Publishing tool. Replit handles the sign-in screen and access checks for you, with no code changes required. Restricting access is useful for apps such as:
  • Internal tools
  • Apps in the beta testing phase
  • Apps that access sensitive information

​
Access options

  • Public: Anyone on the internet with the URL can use your app.
  • Password protected: Anyone on the internet with the password can use your app. Visitors enter a shared password. They don’t need a Replit account.
  • Workspace only: All admins, members, and viewers in your workspace. Replit marks this option as Private.
  • Invite only: Only you, admins, invited groups, and invited users. Replit marks this option as Private. This is the most restrictive option.
The default depends on where you’re building: apps in your personal workspace default to Public, and apps in an organization workspace default to a private option.
With the two Private options, visitors without access are prompted to sign in through Replit before they can view the app. In a personal workspace where you’re the only member, Workspace only and Invite only behave the same way. The distinction matters when you work in a shared workspace with collaborators.
screenshot of the Replit sign-in page shown by a private published app

Sign-in page visitors see on a private app

​
Choose access when you publish

  1. Select Tools in the Project Editor, then select Publishing under Replit Cloud.
  2. Open the Sharing selector and choose from the access options available for your workspace.
  3. Select Publish in the Publishing tool.
Project Editor with Tools open, the Publishing navigation entry highlighted, and the Sharing section highlighted in the Publishing tool with Public selected
Scheduled Deployments don’t have access options because they don’t serve a web page.

​
Change access for a live app

Changing access requires unpublishing your app first. Unpublish it from the Publishing tool, choose a different option under Sharing, and publish again.

​
Manage who’s invited

With Invite only, you grant access to individual users or groups from your workspace’s access management. Workspace admins always have access. Learn more about access management.
Workspace admins can restrict access options for their organization, including turning off password-protected publishing.

​
Next steps