Authentication

Basic auth

Jetpacked lets you put your app behind HTTP basic authentication — the browser's built-in username/password prompt. This is useful for staging environments, internal tools, or any app you want to keep private without building your own auth.

Enabling basic auth

Go to Settings → Authentication in your project and:

1. Set a username and password
2. Toggle basic auth on

Once enabled, every request to your app will require the credentials before it is served. This applies to all routes including APIs — if you're building something that needs to be accessed programmatically, keep that in mind.

Disabling basic auth

Toggle it off from the same settings page. The credentials are preserved so you can re-enable it later without re-entering them.

Limitations

Basic auth is a simple access control layer — it's not a substitute for proper application-level authentication. Credentials are sent with every request and rely on HTTPS to stay private (which Jetpacked provides). For public apps with user accounts, implement auth inside your application instead.