Protected Pages Extra

Protected Pages Extra is a modern reimplementation of the popular Protected Pages module, built with current Drupal best practices. It allows site administrators to password-protect any page on their Drupal site

Features

Protected Pages Extra provides everything the original Protected Pages module offers, plus significant enhancements:
Features matching Protected Pages:

• Password-protect any page by its URL path
• Global password
• Visitors who don't know the password see a password entry form instead of the page content
• Administrators can manage protected pages from a simple admin interface
• Supports wildcard paths
• Set password for private files
• Bypass password protection via permission
• Session Expire Time Setting
• Configurable text for "Enter Password" screen
• Send email to users to inform about protected page

New features in Protected Pages Extra:

• Multiple paths per password: assign one password to multiple paths at once, eliminating the need to create separate entries for related pages that share the same password
• Session-aware authentication: once a visitor enters the correct password for one page, they are not prompted again during the same session for any other page protected by the same password
• Modern Drupal architecture: built using current Drupal APIs including config entities, HTTP middleware, Drupal plugin API and Symfony's session management for improved reliability and security
• Configurable Flood control
• More granular permissions

Post-Installation

After enabling the module:
Navigate to Administration → Configuration → System → Protected Pages Extra (/admin/config/system/protected-pages-extra)
Click "Add protected page" to create a new entry
Enter one or more URL paths to protect (e.g. /members, /private/documents)
Set a password for those paths
Save

Migration from Protected pages

Full comprehensive documentation for the migration from Protected Pages and Protected Pages extra is available below the section Migrating from Protected Pages in the Readme file.

Additional Requirements

• Drupal 11.1 or higher

Similar projects

Protected Pages: the original module that inspired this project.
Password Protected: protects the entire site with a single password rather than individual pages.
Content Access: provides role-based access control per content type, not password-based per URL.

Supporting this Module

This module is developed by Big Blue Door, who actively support its ongoing maintenance and development through sponsored developer time.

AI usage disclosure

Cloude Code has been used to boilerplate the code, tests generation and documentation.