# Access protection

> Put a password in front of a public web app with no code. Own-cloud Starter clusters only: turn it on from the deployment's Security tab.

Access protection puts a login wall in front of a public web app without writing any auth code. Visitors enter a username and password before they reach your app. Turn it on from the deployment's **Security** tab.

**Own-cloud Starter feature.** Access protection runs only on a **Starter** cluster in your own AWS account, the [Advanced](/docs/own-cloud) path. It is not available on Ownkube Compute, and the Security tab is greyed out on Production (EKS) clusters.

## Turn it on

1. **Open the Security tab**

   Go to the deployment's page in your [dashboard](https://app.ownkube.io/dashboard) and open **Security**.

2. **Choose Password protection**

   Set a username and a password. The password is visible to members of your organization so you can share it with the people who need it.

3. **Save**

   Ownkube updates the app's routing and rolls the change out. Once it is live, every visitor sees a browser login prompt before any request reaches your app.

Password protection uses [HTTP basic authentication](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication#basic_authentication_scheme), so it works in every browser and with `curl -u user:password`. Change the password from the same tab at any time; turn the toggle off to make the app public again.

## Where it applies

- **Starter clusters only.** Not on Ownkube Compute, and not on Production (EKS) clusters.
- **Public web apps only.** Workers, jobs, databases and caches have no public URL to protect.
- **Cluster platform 0.14.1 or newer.** If the tab is greyed out with a version note, apply the pending [platform update](/docs/own-cloud/clusters#platform-updates) first.
- **Every hostname.** The wall covers the `ownkube.app` address and any [custom domain](/docs/own-cloud/custom-domains) linked to the app.

## Good for

Staging environments, internal tools, and gating a site before launch: anywhere you want a public URL to exist without being open to everyone yet. For anything that needs per-user accounts, put real authentication in your app and leave access protection off.

- [Custom domains](/docs/own-cloud/custom-domains)
- [Public hostnames](/docs/networking/public-hostnames)
- [Environments](/docs/deployments/environments)

---

**Don't see a feature you need?** Email [support@ownkube.io](mailto:support@ownkube.io?subject=Feature%20request). Ownkube is shaped by the teams using it and we ship what our users ask for.

## Search

This site has a search endpoint: https://context7.com/api/v2/ask?siteKey=ask_c64dfe8ffaa8d3ad19576838&query=<URL-encoded question>. It returns documentation that answers the question, with a source link for each part. No API key is needed. If nothing matches, it says so.