Overview
Most sites in review are not finished, and unfinished sites are usually locked in some way — a staging password, an .htaccess prompt, or a coming soon page. Huddlekit handles most of these. Which method you use depends on how the site is locked.
If the site sits behind a user account rather than a site-wide password — a dashboard, an LMS, a member area — none of the methods below apply. Use a Web App project instead, which installs a small widget inside your own site.
HTTP basic auth (.htaccess / htpasswd)
If the site prompts for a username and password in a browser dialog, put the credentials directly in the project URL when you create the project:
https://username:password@staging.example.com
Huddlekit uses them for every request to that site, including the pages you navigate to afterwards. Digest authentication works the same way.
Anyone who can open the project — including guests on a share link — can view the project URL, so treat credentials added this way as shared with your reviewers. Use a throwaway staging password rather than one that protects anything else.
Site passwords on hosting platforms
For platforms that show their own password page rather than a browser dialog, just enter the password on that page inside the Huddlekit review view. Huddlekit remembers it for that site so you are not asked again on every page.
| Platform | Works |
|---|---|
| Netlify password protection | Yes |
| Vercel Deployment Protection (password) | Yes |
| Webflow site and page passwords | Yes |
| Squarespace site-wide and page passwords | Yes |
| WordPress password-protected pages and posts | Yes |
| Shopify storefront password | No |
| Wix password-protected pages | No |
For Shopify and Wix, remove the password for the duration of the review, or set the project up as a Web App project instead.
Coming soon and maintenance pages
A coming soon plugin answers every request with a splash page, so without help Huddlekit would load the splash page and let people pin comments to it. Huddlekit detects the common plugins — LightStart, SeedProd, Minimal Coming Soon, and Elementor's maintenance mode — and tells you the site is gated instead of showing you the wrong page.
There are two ways through it.
Use the plugin's bypass link
Most coming soon plugins can issue a secret URL that skips the splash page. Paste that whole URL, including its token, as the project URL. Huddlekit carries the token onto the links inside the site, so reviewers can navigate normally without hitting the gate again.
This is the quickest route and needs no changes in Huddlekit. Check your plugin's settings for a "bypass", "secret link", or "exclude" option — note that some plugins only offer this on their paid tier.
Allow Huddlekit's address
If your plugin only supports an IP allowlist, Huddlekit can reach your site from a single fixed address. Email support@huddlekit.com and we will send you the current address to add to your allowlist.
You only do this once per site, and reviewers need to do nothing — everyone who opens the project gets through.
Hosts that block automated traffic
Some hosts — SiteGround, Cloudways, and hosts running aggressive anti-DDoS — treat any request that is not a person's own browser as suspicious, and answer with a security check or an error instead of the page. Huddlekit retries these automatically from a fixed address, and clears SiteGround's security check on its own.
If a site still will not load after a retry, ask whoever manages it to allow traffic from Huddlekit. Email support@huddlekit.com and we will send you the address to give them.
Project thumbnails on locked sites
The preview image on a project card is generated separately, by loading the project URL on its own rather than through the review view. On a locked site that image can show the password page or the coming soon splash instead of the site, or fail to generate at all. It has no effect on the review itself — open the project and everything works as described above.
Still stuck?
See Website project limitations for the other reasons a site may not load, or email support@huddlekit.com with the project URL and we will take a look.
