Skip to content
Docs

Methods to Protect Deployments

Vercel offers several methods for protecting your deployments. Depending on your use case, you can choose to protect a single environment, or multiple environments. See Understanding Deployment Protection by environment for more information.

To see an overview of your projects' protections:

  1. Open Settings in the sidebar of your dashboard and select Deployment Protection
View your project protections on the Dashboard > Settings > Deployment Protection page.
View your project protections on the Dashboard > Settings > Deployment Protection page.

Vercel Authentication is available on all plans

With Vercel Authentication you can restrict access to all deployments (including non-public deployments), meaning only team members with a Vercel account, or users you share a Sharable Link with, can access non-public URLs, such as my-project-1234-your-name.vercel.app.

When a Vercel user visits your protected deployment but doesn't have permission to access it, they can request access for their Vercel account. This request triggers an email and Vercel notification to the branch authors.

Learn more about Vercel Authentication and how to enable it.

Passport is available on Enterprise plans

Passport restricts access to visitors who authenticate through your identity provider. Use Passport when you want to protect deployments with an OpenID Connect compatible provider, such as Okta or Auth0.

Learn more about Passport and how to enable it.

Password Protection is available on Enterprise and Pro plans

Password Protection costs $20 per month per protected project on Pro and is included at the team level on Enterprise. Password Protection is not available on Hobby. See Usage & Pricing for Deployment Protection for the full plan comparison.

Password Protection on Vercel lets you restrict access to both non-public, and public deployments depending on the type of environment protection you choose.

Learn more about Password Protection and how to enable it.

Trusted IPs are available on Enterprise plans

Trusted IPs restrict deployment access to specified IPv4 addresses and CIDR ranges, returning a 404 for unauthorized IPs. This protection feature is suitable for limiting access through specific paths like VPNs or external proxies.

Learn more about Trusted IPs and how to enable it.

Last updated August 28, 2026

Was this helpful?

supported.