Sometimes you need to keep WordPress content private. Maybe you’re working on draft pages with a client, sharing family photos with relatives, or creating member-only content for your business.
WordPress includes built-in visibility controls that let you decide who can see your pages and posts. You can make content completely public, restrict it to certain user roles, or protect it with a password. Here’s how these three visibility options work and when you might want to use each one.
How to set visibility for WordPress pages and posts
When you’re editing any WordPress post or page, look for the Visibility section in the publish area on the right side of your screen. You’ll see three options there.
- Public – The default setting. Anyone can view your content once it’s published.
- Private – Hides content from the public completely. Only administrators, editors, and authors can see private content.
- Password protected – Creates a password form that visitors must complete before viewing your content.
Let’s look at what each option actually does.
Public WordPress content
This is the standard setting for all WordPress content. When you publish a post or page as public, it’s visible to everyone on the internet. Search engines can find it, visitors can read it, and it appears in your site’s normal navigation and feeds.
Most of your website content will probably use this setting. Blog posts, your about page, contact information, and product pages are typically public content.
Private WordPress content
Private content takes a different approach. Instead of showing a password form, private pages and posts are completely hidden from public view. If someone tries to access a private page directly through its URL, they’ll see a 404 error page instead.
Only certain WordPress user roles can see private content, and they need to be logged into your site.
- Administrator – Can view, create, edit, and delete any private content, regardless of who created it.
- Editor – Can view, create, edit, and delete any private content, regardless of who created it.
- Author – Can view, create, edit, and delete their own private content only. They can’t see private content created by other users.
When someone with the right permissions views private content, they’ll see “Private” added to the beginning of the page title.
The main limitation of private content is that you can’t give access to other user roles like subscribers or customers. It’s really designed for internal use by your site’s content creators.
Password protected content
Password protection works differently from private content. Instead of hiding pages completely, WordPress shows a password form that anyone can see. If visitors enter the correct password, they get access to the content.
When you choose password protection, WordPress asks you to set a password for that specific page or post. Make sure to use something secure since this password is the only thing standing between your content and the public.
After you save the page, visitors will see a simple form asking for the password. Once they enter it correctly, they can view the protected content. The password gets stored in their browser, so they won’t need to enter it again for a while.
Here’s the thing though – WordPress’s built-in password protection has some limitations. You can only set one password per page, passwords never expire, and there’s no way to track who’s using them. If someone shares the password, you have no control over who gets access.
When to use each visibility option
Public content works best for most of your website. Blog posts, product information, contact pages, and anything you want people to find through search engines should be public.
Private content is useful for internal notes, draft content you’re sharing with team members, or administrative pages that only your staff should see. Since private content requires specific user roles, it’s not great for sharing with clients or customers who don’t have accounts on your site.
Password protected content fits situations where you want to share something with specific people but don’t want to create user accounts for them. This might be client previews, exclusive content for newsletter subscribers, or family photos you want to share with relatives.
Getting more control with plugins
WordPress’s built-in visibility options cover the basics, but they’re pretty limited. If you need more flexibility, plugins like Password Protect WordPress (PPWP) Pro can give you additional features.
With PPWP Pro, you can set multiple passwords for the same content, protect entire sections of your site, create expiring access links, and restrict password access to specific user roles. It’s particularly useful if you’re running a membership site or need to share content with different groups of people.
The plugin also lets you protect partial content within posts, which the built-in WordPress features can’t do.
Concusion
Most people stick with public content for everything, but there are plenty of valid reasons to use the other visibility options. The key is matching the visibility setting to your actual needs.
If you’re sharing something with your team, private content works well since they already have accounts on your site. If you’re giving access to people outside your organization, password protection is usually the better choice.
The truth is that WordPress’s content visibility features are straightforward once you understand what each option does. Whether you use the built-in settings or add a plugin for more control depends on how complex your sharing needs are.
