Access control

It is completely normal to want control over who sees your pregnancy journey. Biraea offers three levels of protection, and you can choose the one that feels right for you.

• Site-wide password — One shared password for everyone. Quick to set up, easy to share. Good when you just want a simple gate to keep strangers out.
• Access codes — Unique codes for different groups (like “Family” vs. “Friends”). Each group can see different content. Good when you want some guests to see certain events or pages that others should not.
• Guest sign-in — Each guest finds their name and creates their own password. The most personalized option. Good when you want each person to have their own account and you are planning to use features like meal train auto-fill.

You do not need to decide right away. You can start with an open site and add protection later, or switch between methods at any time.

This is the simplest way to keep your site private. You choose one password and share it with everyone you want to invite. When visitors open your site, they see a password prompt before anything else.

1. 1Go to your site’s Settings page.
2. 2Find the Privacy section.
3. 3Toggle on Password protection.
4. 4Enter a password you would like to use, then click Save Changes.

That is it. Anyone who visits your site will need to enter this password to see any of its content. You can share the password however you like — in a text message, on your shower invitation, or in an email.

Before you can use access codes or control which pages each group sees, you need to organize your guests into groups using tags. Think of tags like colored labels — you might have “Family,” “Friends,” and “Work” tags.

1. 1Go to your site’s Guest Manager page.
2. 2Click Manage Tags to expand the tag section.
3. 3Type a tag name (for example, “Family”) and pick a color from the palette.
4. 4Click Add to create the tag.
5. 5Repeat for any other groups you need.

Once your tags are created, you can assign them to individual guests by editing each guest and selecting the tags that apply.

Access codes work like individual keys to your site. You create a unique code for each group, and when a guest enters their code, they see only the content that group is allowed to see. This is a great middle ground — more control than a shared password, but simpler than full guest accounts.

1. 1Go to your site’s Access Control page (found under your site’s settings).
2. 2Click Add Code.
3. 3Type a code that is easy to remember — for example, FAMILY2026 or FRIENDS.
4. 4Optionally add a label for your own reference, like “For family members.”
5. 5Select which tags this code grants. A guest who enters this code will be treated as a member of those groups.
6. 6Click Create.

When visitors arrive at your site, they will see a screen asking for their access code. After entering it, they select their name from a list of guests who share that code’s tags, and then they are in.

Guest sign-in is the most personalized option. Each guest searches for their name on your guest list, then creates their own password. On return visits, they simply sign in. This gives each person a unique identity on your site.

1. 1First, make sure you have added your guests in the Guest Manager — guests need to be on the list before they can sign in.
2. 2In the Guest Manager, find the Require Guest Sign-in card and toggle it on.

That is all you need to do. Here is what your guests will experience:

1. 1They visit your site and see a welcome screen.
2. 2They type their name and select themselves from the search results.
3. 3If it is their first visit, they create a password. If they have been before, they sign in with their existing password.
4. 4They see the content that matches their tags (or all content, if you have not set up tag restrictions).

Once you have guest tags set up, you can decide exactly which pages and events each group gets to see. This is where access control becomes really powerful.

For pages: In the Page Manager, you will see a lock icon next to each page (this only appears when you have guest tags). Click it to choose which tags can access that page. If you leave it open with no tags selected, everyone can see it.

For events: When creating or editing an event, you will see a Visibility option at the bottom. You can set it to “Everyone” or select specific tag groups.

The permission matrix: For a bird’s-eye view, visit the Access Control page. The Tag Permissions table shows every page and event as rows, and every tag as a column. Check or uncheck the boxes to configure access all in one place.

If you are not sure where to start, here is a simple way to think about it:

• I just want to keep my site private. Use a site-wide password. It takes 30 seconds to set up and you can share one password with everyone.
• I want different groups to see different things. Use access codes. Create a code for each group (like family and friends) and link them to tags. Each group enters their own code and sees only what you have allowed.
• I want each guest to have their own account. Use guest sign-in. Each person gets their own login, and you get the most control over the experience. This is also the best option if you plan to use features like the meal train, where knowing who each visitor is makes the experience smoother.

Many parents start with a site-wide password and switch to access codes or guest sign-in later as their needs grow. There is no wrong choice — you can always change your mind.

Your privacy matters, and Biraea takes it seriously. Here are a few things to know:

• Guest passwords are securely hashed — they are never stored in plain text, and no one (including the Biraea team) can see them.
• Access code sessions are stored only in the guest’s browser for that visit. Once they close the tab, they will need to re-enter their code next time.
• Tag-based restrictions are enforced on the server, not just hidden in the browser. A guest cannot see restricted content by guessing a URL.
• You can remove a guest’s access at any time by deleting them from your guest list or removing their tags.
• If you ever need to revoke an access code, simply delete it from the Access Control page. Anyone who had that code will no longer be able to use it.

You are in control. If something ever feels off, you can change your password, delete an access code, or switch protection methods entirely — all from your site settings.