Visibility modes
Each service has one visibility mode. Only service ADMINs can change it, under Settings, in the Page visibility card.
Modes
| Mode | Who can view | Address |
|---|---|---|
| Public | Anyone | /status/{slug} |
| Private, secret link | Anyone holding the link | /p/{token} |
| Private, password protected | Anyone who enters the shared password | /status/{slug} |
Secret link
The link contains a 256-bit random token. The normal /status/{slug} address returns 404 for visitors who have not opened the link, so it does not reveal that the page exists.
Regenerate link creates a new token. The old link stops working, and so does every browser session that used it.
Password
Visitors are redirected to an unlock form. The password is stored hashed, must have at least 6 characters, and is shared by everyone. When you edit the mode and leave the password field empty, the existing password is kept.
Wrong passwords are rate limited per page and client Internet Protocol (IP) address.
Effects of a private mode
- Switching mode or changing the password or link signs out visitors who had unlocked the page.
- Private pages are never indexed by search engines and carry no search engine optimization (SEO) metadata.
- A private page cannot have a custom domain. Adding a domain makes the page public, and choosing a private mode while a domain is set is rejected.