How to password-protect WooCommerce products
WooCommerce can password-protect an individual product without another plugin. For product categories, multiple shared passwords, or the whole shop, you need a WooCommerce extension that adds those rules. The built-in method is fine for a small private product list.
- 01Choose what to protect
- 02Protect one product manually
- 03Check the product listing
- 04Test the manual protection
- 05Use a plugin for categories
- 06Take the fast route
What you need
- A WooCommerce store on WordPress 6.0 or later
- Administrator access to WordPress
- A password you can safely share with authorised customers
Choose what to protect
Decide whether you need to protect one product, several products, a product category, or the entire WooCommerce store. WooCommerce handles an individual product with its normal WordPress visibility controls, but category and store-wide password rules require an extension or custom development.
Use a shared password only when everyone in the group should have the same access. If each customer needs separate permissions, use customer accounts, memberships, or role-based restrictions instead.
Protect one product manually
In WordPress, go to Products and edit the product. In the Publish panel, find the visibility setting, select Password protected, enter the password, and click Update. WooCommerce documents this as the built-in way to require a password before visitors can view the product content.
Do not select Private for shared customer access. A private product is intended for site administrators and editors, not visitors who know a password. The manual method is genuinely fine for one or two products.
Check the product listing
By default, a password-protected product can still appear in the shop and catalogue. Visitors may see the product but must enter the password to view its content, so this is not the same as hiding the product completely.
If the product should only be reached by a direct link, also review its catalogue visibility and choose Hidden. Test the product URL, shop page, search results, and add-to-cart flow while logged out.
Test the manual protection
Open the product in a private browser window and try an incorrect password first. Then enter the correct password and confirm that the product details and purchasing controls behave as expected.
If the password appears to be ignored, clear the page cache and test again. Page caching can serve the wrong version of a password-protected page, particularly when the password relies on a browser cookie. Exclude protected product URLs from page caching where your hosting or cache plugin allows it.
Use a plugin for categories
Install a WooCommerce password-protection extension when you need to protect categories, several products with one rule, or the whole store. In WordPress, go to Plugins, choose Add New, upload the plugin ZIP file, install it, and activate it.
Then open the extension's settings, create a protection rule, select the products, categories, or store area to lock, and set the shared password. Extensions made for this purpose can also provide multiple passwords and controls for whether protected products remain visible in shop and archive listings.
Take the fast route
For a no-code setup covering individual products, categories, or the whole store, use WPC Advanced Password Protect for WooCommerce. It is suited to private catalogues and restricted-access sales because it supports shared passwords and multiple protected areas.
After activation, configure the protection settings, choose the products or categories, set the password rules, and test the result in a logged-out browser. For one product, the built-in WooCommerce method is quicker; for a private catalogue, the plugin route is faster than building custom access rules.
Let WPC Advanced Password Protect for WooCommerce do it
Protects products, categories, or the whole store with shared passwords—best for private catalogs or restricted-access sales.
Sources
- woocommerce.com /document/managing-products/product-editor-settings/?utm_sou…
- wordpress.org /support/topic/password-protected-pages-ttl/?utm_source=open…
- woocommerce.com /document/password-protected-categories-store/?utm_source=op…
Questions
- Does WooCommerce have built-in password protection?
- Yes, WooCommerce can password-protect an individual product through the product editor's visibility setting. The product may still appear in the catalogue, but visitors must enter the password to view its content. WooCommerce does not provide a built-in shared-password rule for whole categories or the entire store, so those cases need an extension or custom development.
- Will a password-protected product be hidden from the shop?
- No, not automatically. WooCommerce's built-in Password protected visibility allows the product to remain visible in the catalogue while restricting the product page content. If you do not want customers to see it in shop or search listings, set its catalogue visibility to Hidden as well, then test direct links and related-product areas.
- Can I password-protect a WooCommerce category without a plugin?
- Not with WooCommerce's normal product settings. The built-in visibility control works at product level, while category and store-wide password rules require an extension or custom code. A purpose-built extension is usually the practical option because it can apply one rule to many products and control how protected items appear in shop and archive pages.
- Why does the correct password sometimes fail on a product?
- Caching is a common cause. Password protection uses a browser cookie, but a page cache or CDN can serve a cached response instead of processing the visitor's current access state. Purge the cache, test in a private browser window, and exclude protected product URLs from page caching where possible.