Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.This project is not covered by Drupal’s security advisory policy.
Protected Pages Extra is a modern reimplementation of the popular Protected Pages module, built with current Drupal best practices. It allows site administrators to password-protect any page on their Drupal site
Features
Protected Pages Extra provides everything the original Protected Pages module offers, plus significant enhancements:
Features matching Protected Pages:
- Password-protect any page by its URL path
- Global password
- Visitors who don't know the password see a password entry form instead of the page content
- Administrators can manage protected pages from a simple admin interface
- Supports wildcard paths
- Set password for private files
- Bypass password protection via permission
- Session Expire Time Setting
- Configurable text for "Enter Password" screen
- Send email to users to inform about protected page
New features in Protected Pages Extra:
- Multiple paths per password: assign one password to multiple paths at once, eliminating the need to create separate entries for related pages that share the same password
- Session-aware authentication: once a visitor enters the correct password for one page, they are not prompted again during the same session for any other page protected by the same password
- Modern Drupal architecture: built using current Drupal APIs including config entities, HTTP middleware, Drupal plugin API and Symfony's session management for improved reliability and security
Post-Installation
After enabling the module:
Navigate to Administration → Configuration → Content authoring → Protected Pages Extra (/admin/config/content/protected-pages-extra)
Click "Add page protection" to create a new entry
Enter one or more URL paths to protect (e.g. /members, /private/documents)
Set a password for those paths
Save
Additional Requirements
- Drupal 11.1 or higher
Similar projects
Protected Pages: the original module that inspired this project.
Password Protected: protects the entire site with a single password rather than individual pages.
Content Access: provides role-based access control per content type, not password-based per URL.
Supporting this Module
This module is developed by Big Blue Door, who actively support its ongoing maintenance and development through sponsored developer time.
Supporting organizations:
Development and maintenance
Project information
- Project categories: Access control
- Created by marco.pagliarulo on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
