My password-protected site opens without asking for a password

That's expected, and your site is still protected.
Once someone has entered the password on a device, their browser remembers them and doesn't ask again. Since you set the password up, that's almost certainly you.

Check it for yourself

Open your link in a private or incognito window, or on a different device — a phone on mobile data works well. You'll get the password screen, because that browser has never been let through. That's what everyone you share the link with will see.

Clearing it on your own browser

If you'd rather be asked again on your own device, clearing your cache and cookies resets it.

Changing the password

Click Update on the project → Customize project → Access settings. Changing the password there means everyone has to enter the new one, including people who'd already been let through.

Still not behaving as you'd expect?

Email support@tiiny.host with your link and we'll check it.

Updated on: 20/08/2026