Skip to content

Latest commit

 

History

History
31 lines (22 loc) · 1.29 KB

README.md

File metadata and controls

31 lines (22 loc) · 1.29 KB
Raw

Password protection for static pages

Very simple password protection to static pages or whole websites with no server configuration required: you ca use Dropbox, Amazon S3 or any generic hosting service to host a private, password protected site.

Check out the demo

Password is: password

Setup

  • Upload the index.html document to the root of your static hosting service.
  • Load it up in your browser, enter the password of your choice
  • It will show "wrong password", never mind. Copy the section of the URL after the # sign.
  • Create a folder with that name next to the index.html file
  • Upload the content that you want to protect inside the folder

The final structure will be:

- index.html
- background.jpg
- this-is-a-hash      <-- the SHA1 hash of your password
  \ - index.html      <-- your original index document

Things to consider

  • If your hosting service offers directory listing, a visitor can bypass the protection.
  • there's no protection against brute force attack. Pick a very long and hard to guess password.
  • Pasting the link directly to someone will bypass the login

Credit to @matteobrusa for his initial findings and implementation.