Goal: decide whether visitors re-enter the password every visit, or stay unlocked for weeks.
Steps
- Go to Password Protected → Settings → Session.
- Stay unlocked for (days) — how long a normal unlock lasts:
0— until they close their browser1— one day (the default)30— a month
- To let visitors choose a longer session:
- Turn on Show “Remember me” checkbox
- Set Remember me duration (days) — 14 by default
- Save.
Choosing a length
| Setting | Suitable for |
|---|---|
0 (browser session) |
Shared or public computers, sensitive content |
1 |
A good default |
7–30 |
Client previews, regular visitors |
365 |
Low-sensitivity content where convenience wins |
What visitors see with Remember me on
A checkbox labelled “Remember me for 14 days”, showing whatever duration you configured. Ticking it uses the longer session; leaving it unticked uses the normal one.
Cookie or transient authentication
Default: Standard cookie.
| Option | How it works | When to use it |
|---|---|---|
| Standard cookie | A signed cookie in the visitor’s browser. | Almost always. This is the reliable choice. |
| Transient (IP-based) | Access is recorded server-side against the visitor’s IP. | Only if cookies are being stripped by an aggressive proxy or cache. |
Transient mode has a real drawback: everyone sharing an IP address — an office, a school, a mobile carrier — shares the unlocked state. Use it only if cookies genuinely do not work for you.