How to Create Bypass Links for Password Protected WordPress Pages [Step-by-Step]

Want to share a password-protected WordPress page without sending someone a password? A WordPress bypass link lets visitors open protected content directly, without manually entering the associated password.

Use bypass links to share client previews, private resources, event details, or internal materials. With Password Protected Pro, you can also manage password expiry dates and usage limits.

But remember: anyone who obtains a working link may be able to use it. Treat each bypass link like an access credential and share it carefully.

In this guide, we’ll show you how to create a bypass link, configure its settings, test access, and troubleshoot common problems.

What Is a Bypass Link for Password-Protected WordPress Pages?

A WordPress bypass link lets visitors access password-protected pages, posts, or other content without manually entering a password. You can create these links using a content protection plugin such as Password Protected.

Instead of sharing a password, you share the generated bypass link. Visitors can open the link to access the protected content covered by its settings.

Bypass links make it easier to share client previews, private resources, and other protected content while keeping the rest of your WordPress site protected. However, anyone who obtains a working link may be able to use it, so share links carefully.

Bypass Link vs. Standard Password Protection

Both options protect content, but they offer different ways to grant access.

Feature	Standard password protection	Bypass link
How visitors access content	Visitors enter the required password.	Visitors open the generated link.
What you share	You share the password separately.	You share the direct-access link.
Convenience	Visitors must complete the password step.	Visitors can skip that step for the content covered by the link.
Access control	You manage the associated password and its settings.	You manage the associated password settings and control how you distribute the link.
Main risk	Someone can share the password with others.	Someone can forward the link to others.

A bypass link makes access easier. It doesn’t automatically make the recipient’s identity more secure.

When Should You Use a WordPress Bypass Link?

Bypass links work well when you want to reduce friction for people who need access to specific protected content.

Here are a few practical examples.

1. Share Client Previews

You can protect a draft page, project update, or client presentation and send the client a bypass link. They can open the page without asking you for a password.

But check the page before sharing it. Remove internal notes, unpublished information, and anything the recipient shouldn’t see.

2. Share Event Information

Use a bypass link to share protected event details, schedules, or other information with attendees. An expiry date can help limit access after the information is no longer relevant.

3. Give Your Team Access to Internal Resources

A bypass link can simplify access to protected training materials, internal instructions, or project resources. Share it only through channels appropriate for the sensitivity of the content.

4. Share a Protected Resource Page

You can create a protected page that links to documents or downloads, then share the page’s bypass link with the intended audience.

Remember, a bypass link isn’t a private invitation. Anyone who obtains a working link may be able to access the protected content.

A link alone doesn’t establish who the visitor is, and a protected page doesn’t necessarily protect the direct URL of every file linked from it. Test file URLs separately and use file-level access controls when necessary.

How to Create a WordPress Bypass Link

The following steps show you how to create a bypass link for an individual WordPress page. Password Protected Pro also supports bypass links for other supported protection types, including posts and selected archives.

You’ll need Password Protected Pro’s Professional or Business plan to use the bypass link creation feature. 

Step 1: Install and Activate Password Protected Pro

First, install the free Password Protected plugin and activate it on your WordPress website.

1. Log in to your WordPress dashboard. Navigate to Plugins → Add Plugin.

2. Search for Password Protected.
3. Click Install Now, then click Activate.

Next, obtain Password Protected Pro from the official Password Protected pricing page. You will receive an email containing the Pro plugin ZIP file and a license key.

1. Download the Pro plugin ZIP file from your email and copy the license key.
2. In WordPress, navigate to Plugins → Add Plugin → Upload Plugin.

3. Upload the ZIP file and click Install Now.

4. Click on Activate Plugin.
5. Enter your license key and then click Activate License.

Congratulations on successfully installing and activating Password Protected Pro.

Step 2: Enable Individual Page Protection

Before you create a bypass link, enable individual protection for the relevant post type.

Follow these steps:

1. Open your WordPress dashboard.
2. Navigate to Password Protected → Content Protection.

3. Select Post Type Protection.
4. Enable individual protection for Pages.

5. Click Save Changes.
6. Next, open Pages → All Pages and edit the page you want to protect. Find the Password Protected settings and enable password protection for that page.

7. Save your changes before continuing.

If you want to protect a post instead, enable individual protection for Posts. Then head to Posts → All Posts, enable password protection for that post, and save your changes.

Step 3: Configure the Password Settings

1. Just after you save your changes after enabling password protection, you will see the password settings for the page you want to protect and later share the bypass URL for.

2. Configure the available password settings:

• Password: Create the password associated with the protected content.
• Usage Limit: Set the allowed number of uses. Leave this field blank if the plugin permits unlimited uses.
• Expiry Date: Set the date when the associated password should expire.
• Password Status: Check that the password is active.
• Bypass Link: Enable this option to generate a direct-access link.
• Redirect To: Select a destination if this option is available for your configuration.

3. Enter the required settings and enable the bypass link option. Then click Save Password.

Password Protected Pro will display the saved password details and the generated bypass link. Copy the link for testing.

Keep it private. Don’t publish it in a public post, a publicly accessible document, or a page that search engines can index if you intend to restrict access.

Step 4: Test the Link Before Sharing It

Don’t assume the link works just because the plugin generated it. Test it first.

1. Open a private or incognito browser window and enter the protected page URL.

2. Copy the generated Bypass URL and paste the link into the address bar.
3. Check whether the browser opens the intended protected page without asking for the associated password.
4. Confirm that the page displays the correct content.

5. Test the ordinary page URL separately to check its expected password protection behavior.

If your site uses several protection levels, test the link against that configuration as well. A successful test in one browser session doesn’t prove that every visitor will have the same experience.

Which WordPress Content Types Support Bypass Links?

Password Protected Pro supports bypass links for several types of protected content. The available options depend on how you configure content protection.

You can create bypass links for the following content types:

• Individual pages: Share access to specific WordPress pages.
• Individual posts: Give visitors direct access to specific WordPress posts.
• Global protection: Share access to posts or pages covered by global protection settings.
• Categories and taxonomies: Provide access to supported protected categories and taxonomies.
• Post tags: Share access to protected post-tag archives.
• WooCommerce products: Give visitors access to protected products.
• Whole-site protection: Use the site’s master bypass URL to provide access through site-wide protection.

Choose the protection type that matches your needs. Use individual protection to share a specific page or post. For broader access, consider the available global, category, taxonomy, or site-wide options.

How to Manage WordPress Bypass Links

Creating a link is only part of the job. You also need to manage the associated password settings and review who can access the content.

Set an Expiry Date for Temporary Access

If a client only needs access for a week or an event page only needs to remain available until a particular date, configure an expiry date for the associated password.

This helps prevent access from continuing longer than intended. Check the password’s status after expiry if you need to confirm that access has ended.

Configure a Usage Limit

A usage limit can help when you want to restrict how many times the associated password can be used. The plugin’s documentation describes this setting alongside bypass link creation.

However, don’t describe a usage limit as a guaranteed one-person restriction. A usage count and a person’s identity are different things, and you should test the exact behavior in your plugin version before relying on it for a sensitive workflow.

Review Password Status

Password Protected Pro provides password status options such as active, deactivated, or expired, depending on the screen and protection type.

Review the relevant entry when access should end. If you deactivate it, test the existing link in a private browser window to confirm that it no longer grants the intended access.

What If Someone Shares the Link?

You can’t control every copy of a link after someone receives it. If the link reaches unintended recipients, deactivate the associated password or access entry and verify the result before creating or sharing a replacement.

Also review where you originally shared the link. Remove it from public posts, documents, or messages where you can still edit the content.

Are WordPress Bypass Links Safe?

Bypass links can simplify access to protected content, but you should treat them as credentials rather than proof of a visitor’s identity.

Anyone who obtains a working link may be able to access the content it covers. A recipient could forward it, copy it into another message, or expose it unintentionally.

Follow these practices to reduce avoidable risks:

• Share links privately. Send them only to the intended audience.
• Set an expiry date. Use one when access should end at a defined time.
• Limit usage when appropriate. Configure the available usage limit and test its behavior.
• Review access regularly. Deactivate access that you no longer need and confirm that the link stops working.
• Avoid highly sensitive information. Don’t rely on a shareable link alone when the content requires identity verification, user-specific permissions, or an audit trail.
• Check direct file URLs. Protect downloadable files separately when the files themselves require restricted access.

A bypass link improves convenience. It doesn’t replace a membership system, authenticated user accounts, or another access-control method when you need to verify individual identities.

How to Fix a WordPress Bypass Link That Doesn’t Work

If a bypass link opens the password screen, leads to the wrong page, or stops working, check the following settings in order.

1. Check the Password Status

Open the relevant password settings in WordPress. Confirm that the associated password remains active and that you enabled the Bypass Link option.

Save any changes before testing again.

2. Check the Expiry Date and Usage Limit

The password may have expired or reached its configured usage limit. Review both settings and check the password’s current status.

If the access entry has expired or no longer meets the configured limits, adjust the settings as appropriate and test the result.

3. Confirm the Protection Type

Check that you created the bypass link for the correct page, post, global protection setting, category, or tag.

A link created for one protection type may not provide the access you expect for content governed by another setting. 

4. Check Other Protection Levels

If your site uses site-wide, global, category, and individual protection, review the full configuration.

Test the link in a private browser window to avoid relying on a password session that you created earlier.

5. Rule Out Caching or Redirect Problems

If the settings look correct but the link still behaves unexpectedly, check whether your caching plugin, hosting cache, CDN, or redirect rules affect the destination.

Clear the relevant caches if appropriate, then test the link again. Also confirm that the destination page still exists and that the link points to the expected URL.

If the issue persists, collect the affected protection type, password status, expiry and usage settings, and the behavior you observe. Then contact Password Protected support for help with the specific configuration.

Share Protected WordPress Content Using Bypass Links with Password Protected

WordPress bypass links make it easier to share protected pages and other supported content without asking every visitor to enter a password.

With Password Protected Pro, you can configure bypass links for supported protection types, set password usage limits and expiry dates, and manage access through the plugin’s settings.

But don’t treat a link as proof of identity. Share it carefully, test it before sending it, and choose stronger access controls when your content requires them.

Ready to create bypass links for your WordPress site? Get Password Protected Now!

Frequently Asked Questions