Vercel deployment password gate

A free, portable password wall for preview deployments by default — and for production too, opt-in (see "Gating production too"). Humans see a brandable unlock form once (a signed 1-year cookie keeps them in); automation passes with named bypass tokens via header or query parameter. In the default preview-only posture, production ships no middleware function at all (Mode B) or a one-boolean short-circuit (Mode A), so the gate's production cost is zero. Only a scrypt hash of the password is stored; unlock cookies are keyed per-credential, so rotating the password or removing a bypass token revokes exactly the cookies it issued.

Removing an existing installation?

For "remove the password protection", "uninstall the gate", or "make the site public again", go directly to Remove the gate. Do not run the installation steps. That guide covers reverting isolated commits, manual removal, external configuration cleanup, and deployment verification.