> ## Documentation Index
> Fetch the complete documentation index at: https://citodocs.prostack.host/llms.txt
> Use this file to discover all available pages before exploring further.
# Password Protection
> Protect your Cito sites with HTTP Basic Auth
Cito sites can be password-protected. This is managed via the site's Settings page, under 'Security'.
We use HTTP Basic Auth for password protection. It is possible to have multiple users with access to a single website.
**What about subfolders?**
Currently password protection can only be enabled for an entire website.
## Enabling Password Protection
To enable password protection, click the toggle next to 'Password Protection status'.
You can disable access to a site entirely if you wish, by enabling password protection without any users.
Note that 'Name' is purely descriptive- this is an optional field that appears in some browser's prompts.
## IP Bypass
You can also allow specific IP addresses to bypass password protection, by adding them to the 'IP bypass' list.
## Managing Users
You can add and remove users in the 'User Management' section of the password protection page. This page lists existing users.
To add a new user, simply enter the details into the fields and click 'Add'.
Note that passwords are encrypted and not visible once a user has been created. To change a password, delete and re-create the user.