With email verification, you decide who can open your published site. Only visitors with an email address on your list get access. This is useful for reporting pages, an offer for one specific client, or other content that shouldn't be public.
A visitor enters their email address, receives a one-time code by email and sees the site after entering that code. A Trackler account is not required.
Setting up email verification
Go to Settings > Sites and open your site.
Click the Settings tab at the top.
Under Access, turn on Require email verification.
Under Email addresses with access, add the addresses. Type an address and click Add, or paste a list of addresses separated by commas.
Under How long access stays valid, choose after how much time a visitor needs to verify again.
Click Save.
You need to add at least one email address before you can save. When the toggle is off, anyone with the link can open your site.
How long access stays valid
After verifying, a visitor stays signed in for a set period. After that, the site asks for a new code. You can choose from:
1 hour
12 hours (default)
1 day
7 days
30 days
Choose a shorter duration for sensitive content, and a longer one if visitors open the site often.
What visitors see
When a visitor opens a protected site, they first see a screen where they enter their email address. If that address is on your list, they receive a one-time code by email. After entering the code, they see the site.
What is and isn't protected
Protection applies to all pages of your site, on both staging and production, including when you share a preview link.
Not protected:
Your draft in the editor. It always stays private to the people who can edit the site.
A scheduler you embed in a page. It stays reachable through its own link.
Your public profiles. These also stay reachable through their own links.
Revoking access
Every time you save the access settings, all visitors are signed out. On their next visit, they verify again. If you remove an email address from the list, that person can no longer open the site straight away.
Frequently asked questions
What happens if someone enters an email address that isn't on the list?
No code is sent. The visitor does see the same message as someone who is on the list. This way, nobody can find out which addresses have access.Can I set a password instead of email verification?
No, email verification is currently the only way to protect a site.Does a visitor need a Trackler account?
No, an email address on your list is enough.How do I remove someone's access immediately?
Remove their email address from the list and click Save. Everyone is signed out, and only addresses still on the list can verify again.