# Documentation Password Protection

**URL:** <https://community.postman.com/t/documentation-password-protection/2829>\
**Category:** Help Hub\
**Tags:** documentation\
**Created:** [October 1, 2018, 11:53am UTC](https://community.postman.com/t/documentation-password-protection/2829 "2018-10-01T11:53:28Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![p.seifert](https://avatars.discourse-cdn.com/v4/letter/p/b38774/32.png) [@p.seifert](https://community.postman.com/u/p.seifert)\
**Post date:** [October 1, 2018, 11:53am UTC](https://community.postman.com/t/documentation-password-protection/2829/1 "2018-10-01T11:53:28Z")

</div>

it would be awesome to define a password (or HTTP Basic authentication data) for an published documentation. i think there are many APIs which are published to the own team with the custom domain but should not be available fully public.

---

<div class="post-metadata">

**Author:** ![ankit-m](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/ankit-m/32/979_2.png) [@ankit-m](https://community.postman.com/u/ankit-m)\
**Post date:** [October 3, 2018, 5:00pm UTC](https://community.postman.com/t/documentation-password-protection/2829/2 "2018-10-03T17:00:12Z")

</div>

Just wondering. Does sharing the collection in a team workspace help you? It is only visible to your team and they can view the documentation.

[https://learning.getpostman.com/docs/postman/workspaces/intro\_to\_workspaces/#team-workspaces](https://learning.getpostman.com/docs/postman/workspaces/intro_to_workspaces/#team-workspaces)

---

<div class="post-metadata">

**Author:** ![p.seifert](https://avatars.discourse-cdn.com/v4/letter/p/b38774/32.png) [@p.seifert](https://community.postman.com/u/p.seifert)\
**Post date:** [October 5, 2018, 11:39am UTC](https://community.postman.com/t/documentation-password-protection/2829/3 "2018-10-05T11:39:58Z")

</div>

we got api and frontend devs, if we would limit the access to team members only our api devs would have access. the frontend devs do not need to change the docs just read/use them. same about external devs for which we do not buy seats in our team.

at least a “readonly-seat” would be an option too

---

<div class="post-metadata">

**Author:** ![ankit-m](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/ankit-m/32/979_2.png) [@ankit-m](https://community.postman.com/u/ankit-m)\
**Post date:** [October 8, 2018, 8:20am UTC](https://community.postman.com/t/documentation-password-protection/2829/4 "2018-10-08T08:20:09Z")

</div>

If I am correct, you have the following use cases -

1. Sharing with API devs (who have edit access)
2. Sharing with front end devs (who cannot edit)
3. External devs (who cannot edit)

You can do the following for each use case

1. **Sharing with API devs** : Create a team workspace and create/share your collections inside it. Open the collection context menu (icon with three horizontal dots) and click on `Modify Permissions`. Here you can choose the permissions for your team and individual members. You can give edit access to your API devs only.

2. **Sharing with front end devs** : The same steps as above. The members who have not been given edit permissions will only be able to view the private documentation. In the collection sidebar in your app, you will find a `View in web` button. This opens the private documentation.

3. **Sharing with external devs** : You can `Publish` the documentation and a public URL will be generated, which you can share with everyone. Again, only user who you have explicitly given permission to can edit this collection. However, this a public URL and anyone with the link can view the collection. If you are looking to restrict this published view, that is not supported as of now.

Hope this helps.

---

<div class="post-metadata">

**Author:** ![p.seifert](https://avatars.discourse-cdn.com/v4/letter/p/b38774/32.png) [@p.seifert](https://community.postman.com/u/p.seifert)\
**Post date:** [October 8, 2018, 10:12am UTC](https://community.postman.com/t/documentation-password-protection/2829/5 "2018-10-08T10:12:56Z")

</div>

> [@ankit-m](#):
>
> If I am correct, you have the following use cases -
> 
> 1. Sharing with API devs (who have edit access)
> 2. Sharing with front end devs (who cannot edit)
> 3. External devs (who cannot edit)
> 
> You can do the following for each use case
> 
> 1. Sharing with API devs: Create a team workspace and create/share your collections inside it. Open the collection context menu (icon with three horizontal dots) and click on `Modify Permissions`. Here you can choose the permissions for your team and individual members. You can give edit access to your API devs only.
> 
> 2. Sharing with front end devs: The same steps as above. The members who have not been given edit permissions will only be able to view the private documentation. In the collection sidebar in your app, you will find a `View in web` button. This opens the private documentation.
> 
> 3. Sharing with external devs: You can `Publish` the documentation and a public URL will be generated, which you can share with everyone. Again, only user who you have explicitly given permission to can edit this collection. **However, this a public URL and anyone with the link can view the collection. If you are looking to restrict this published view, that is not supported as of now.**
> 
> Hope this helps.

thanks for this detailed solution approach - the last part is basicly the feature request. would be awesome to protected the docu (on custom domain) and send it to external people. this would also fit for use case 2.

---

<div class="post-metadata">

**Author:** ![brickbeard](https://avatars.discourse-cdn.com/v4/letter/b/eb9ed0/32.png) [@brickbeard](https://community.postman.com/u/brickbeard)\
**Post date:** [April 1, 2019, 9:08pm UTC](https://community.postman.com/t/documentation-password-protection/2829/6 "2019-04-01T21:08:38Z")

</div>

Our team would also like to have this feature. We have no problem paying for users who are actually using Postman and utilizing its features. However, for the higher-ups who would like to see this documentation, temporary cross-team collaboration members, and simply anyone we would like to share this documentation with without making it truly **public** … we cannot justify the expense.

Is this something you have on the roadmap?

---

<div class="post-metadata">

**Author:** ![michael.higgins](https://avatars.discourse-cdn.com/v4/letter/m/87869e/32.png) [@michael.higgins](https://community.postman.com/u/michael.higgins)\
**Post date:** [April 8, 2019, 2:58pm UTC](https://community.postman.com/t/documentation-password-protection/2829/7 "2019-04-08T14:58:44Z")

</div>

I’m going to second @brickbeard on his reply. We would like to use the documentation feature since it saves us tons of time but we have several internal APIs that cannot be made externally available. If we had a way to secure the documentation so that only those allowed could see it, I could add it to the list of reasons we need a Pro/Enterprise relationship with Postman.

---

<div class="post-metadata">

**Author:** ![system](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/system/32/29796_2.png) [@system](https://community.postman.com/u/system)\
**Post date:** [December 9, 2024, 2:33pm UTC](https://community.postman.com/t/documentation-password-protection/2829/8 "2024-12-09T14:33:41Z")

</div>

Closed on December 9, 2024, 2:33pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
