> ## Documentation Index
> Fetch the complete documentation index at: https://docs.replit.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Who can access your app

> Control who can open your published app: public, password protected, workspace only, or invite only. No code changes required.

When you publish your app, you control who can open it. Choose an option under **Who can access your app** in the publish settings. Replit handles the sign-in screen and access checks for you, with no code changes required.

Restricting access is useful for apps such as:

* Internal tools
* Apps in the beta testing phase
* Apps that access sensitive information

## Access options

* **Public**: Anyone on the internet with the URL can use your app.
* **Password protected**: Anyone on the internet with the password can use your app. Visitors enter a shared password. They don't need a Replit account.
* **Workspace only**: All admins, members, and viewers in your workspace. Replit marks this option as **Private**.
* **Invite only**: Only you, admins, invited groups, and invited users. Replit marks this option as **Private**. This is the most restrictive option.

The default depends on where you're building: apps in your personal workspace default to **Public**, and apps in an organization workspace default to a private option.

<Note>
  With the two **Private** options, visitors without access are prompted to sign in through Replit before they can view the app. In a personal workspace where you're the only member, **Workspace only** and **Invite only** behave the same way. The distinction matters when you work in a shared workspace with collaborators.
</Note>

<Frame caption="Sign-in page visitors see on a private app">
  <img src="https://mintcdn.com/replit/jSmYU1wBTvl8UMyc/images/deployments/private-deployments/private-deployment-login.jpg?fit=max&auto=format&n=jSmYU1wBTvl8UMyc&q=85&s=ecad9adfb9c2409ff7001aad4690870b" alt="screenshot of the Replit sign-in page shown by a private published app" width="1920" height="1080" data-path="images/deployments/private-deployments/private-deployment-login.jpg" />
</Frame>

## Choose access when you publish

1. Select **Publish** in the top-right of the Project Editor, or open **Publishing** under **Replit Cloud** in the **Tools** pane.
2. Under **Who can access your app**, select **Public**, **Password protected**, **Workspace only**, or **Invite only**.
3. Select **Publish**.

<Info>
  Scheduled Deployments don't have access options because they don't serve a web page.
</Info>

## Change access for a live app

<Note>
  Changing access requires unpublishing your app first. Unpublish it from the Publishing tool, choose a different option under **Who can access your app**, and publish again.
</Note>

## Manage who's invited

With **Invite only**, you grant access to individual users or groups from your workspace's access management. Workspace admins always have access. Learn more about [access management](/teams/identity-and-access-management/repl-access-management).

<Note>
  Workspace admins can restrict access options for their organization, including turning off password-protected publishing.
</Note>

## Next steps

* [Publish your app](/features/publishing/overview): Review the full publish flow.
* [Access management](/teams/identity-and-access-management/repl-access-management): Manage users and groups in your workspace.