Quick answer
Directory Privacy adds a separate browser username/password prompt to a folder. Create an authorized user as well as enabling protection, and use HTTPS for access.
Applies to
For Interactive Online cPanel customers with permission to manage the selected service. The tool must be enabled on your plan. Open the correct service from the Client Area before changing anything. The preserved video shows an older interface.
Steps
- Back up any existing .htaccess configuration. Open Files > Directory Privacy and locate the exact directory; confirm its relationship to the website's document root.
- Open the directory settings, enable password protection, give the protected area a recognizable name and save.
- Create an authorized user with a strong unique password. Store it securely; it is separate from the cPanel login.
- Check whether your CMS, API or certificate validation needs access to that path before retaining protection.
Check the result
In a private browser window, visit the HTTPS folder URL. Confirm an unauthenticated request is challenged and the intended directory user can enter.
Troubleshooting and support
A 401 response is the expected unauthenticated challenge. A 403 or broken application route can indicate a conflicting rule. Protecting a folder is different from hiding its listing.
If the problem continues, contact support from the account that owns the service. Include the domain, exact error, time and time zone, tool name, and a redacted screenshot. Keep passwords, private keys, cookies and private message content out of the ticket.
Video tutorial
The original video is preserved. Its interface or product version may differ from the written guidance above.
Related help
Official references
Written content reviewed November 1, 2026. Menu availability depends on the product version, permissions and service.
