Password & access control
The Protection tab restricts who can pass through a link: with a password, by country, or by the site the visitor came from. Visitors who don't qualify get a “Link not found” page, or a fallback URL you choose.
The settings
| Setting | Effect | Plan |
|---|---|---|
| Password | Visitors must enter it before being redirected. Once entered, it is remembered on that browser for 24 hours. | Starter+ |
| Blocked countries | Visitors from these countries are refused. | Starter+ |
| Allowed countries | If you list any, only those countries get through (a whitelist). Visitors whose country is unknown are refused. | Starter+ |
| Allowed referrers | Only visitors coming from these sites get through. yourbrand.com also allows its subdomains, like shop.yourbrand.com. | All plans |
| On block | Show 404, or Redirect to a fallback URL (for example a page explaining the offer isn't available in their country). | All plans |
Example: a password for a private download
You send a press kit to journalists and don't want the link to work if it's forwarded around.
- Create go.yourbrand.com/presskit pointing to the file.
- Protection tab: turn on Protection enabled, set the password press2026, Save.
- Send the link and the password separately.
Enter the password to continue.
A wrong password shows “Incorrect password. Try again.”
Example: only three countries
A promotion is only valid in Vietnam, Thailand and the Philippines. Set Allowed countries to VN, TH, PH:
Prefer to send other countries somewhere useful rather than blocking them? Use targeting rules instead.
Example: only from your own site
A members-only discount link should only work when clicked from your member area. Set Allowed referrers to members.yourbrand.com. Pasting the link into a browser, or sharing it elsewhere, gets a 404.
Order of checks
Blocked countries → allowed countries → allowed referrers → password. Protection runs before routing, so a refused visitor never reaches a rule, split or destination.