{"id":11866,"date":"2021-09-01T13:01:17","date_gmt":"2021-09-01T17:01:17","guid":{"rendered":"https:\/\/www.med.unc.edu\/webguide\/?page_id=11866"},"modified":"2025-02-27T15:05:36","modified_gmt":"2025-02-27T20:05:36","slug":"password-protecting-content","status":"publish","type":"page","link":"https:\/\/www.med.unc.edu\/webguide\/userguide\/password-protecting-content\/","title":{"rendered":"Password Protecting Content"},"content":{"rendered":"

Sensitive Information Restrictions<\/h2>\n
\n

Sensitive information, including PHI cannot be added to any School of Medicine website.<\/p>\n<\/div>\n

Sensitive information, including Protected Health Information (PHI)<\/a>, cannot be stored on any School of Medicine website, even if the content is password-protected. While password protection provides a layer of security, it is not strong enough to safeguard sensitive information. For more details, see the resources at the bottom of this page.<\/p>\n

\n

Password Protect a Single Page<\/h2>\n

There are two methods for password protecting a page: Onyen authentication and unique password protection.<\/p>\n

Password Protecting with Onyen Authentication<\/h3>\n

Onyen authentication grants access to all Onyen users<\/strong>. It cannot be restricted to a specific department or group.<\/p>\n

This solution requires the use of the UNC Permissions plugin<\/strong>. You will first need to ensure that this plugin has been activated on your website.<\/p>\n

    \n
  1. Select Plugins<\/strong> in the Dashboard. Note that only Administrators<\/a> can see and edit site plugins. If you don’t see Plugins in the dashboard then you are not an administrator and will need to get an administrator to enable the plugin.
    \n\"Screenshot<\/li>\n
  2. Either search for or find the the UNC Permissions Plugin<\/strong> in the list.
    \n    \"Screenshot<\/a><\/li>\n
  3. Activate the plugin.<\/li>\n<\/ol>\n

    Once the plugin has been activated, you can use Onyen authentication to protect a page.<\/p>\n

      \n
    1. Log in to your website.<\/li>\n
    2. Go to the page you wish to password protect.<\/li>\n
    3. Edit<\/strong> the page.<\/li>\n
    4. In the Onyen Restricted Content<\/strong> box in the right-hand column, select the Require Onyen Authentication<\/strong> option.
      \n\"Screenshot<\/li>\n
    5. Save<\/strong> the changes<\/li>\n
    6. Visitors will be required to log in through UNC’s Single Sign-On before they can view the page.
      \n\"Screenshot<\/li>\n<\/ol>\n

      Using a Unique Password<\/h3>\n

      Using a unique password can be helpful for temporary<\/strong> access needs, such as allowing someone to review a page. However, shared passwords are not a secure long-term solution.<\/p>\n

      Example of when a unique password might be useful<\/h4>\n

      Let’s say you wish to have someone review the content on a new web page before the page is made available on your website. Rather than give the reviewer access to the website (which is what they would need to see a draft page), you could publish the page with password protection. All you would have to do is send the link\/url and the password to the reviewer for them to access the page. Because the web page will eventually be available to the public, no significant damage would occur should someone else gain access to the page.<\/p>\n

        \n
      1. Log in to your website.<\/li>\n
      2. Go to the page you wish to password protect.<\/li>\n
      3. Edit<\/strong> the page.<\/li>\n
      4. In the Publish<\/strong> box located in the right-hand sidebar, click on the Edit<\/strong> link located next to Visibility: Public<\/strong>.\"Screenshot<\/a><\/li>\n
      5. Select the Password protected<\/strong> option.<\/li>\n
      6. Enter the password you wish to use.<\/li>\n
      7. Publish<\/strong> the page<\/li>\n<\/ol>\n

        Visitors will be prompted to enter the password before they can view the page. Additionally, WordPress will prepend \u201cProtected\u201d before the title of the page.<\/p>\n

        \"Screenshot<\/a><\/p>\n

        The same password can be used on multiple pages to allow users to log in to all content at once. The first time a visitor enters a password, it will automatically unlock all pages that use that same password.<\/p>\n

        \n

        Media Files Cannot Be Password Protected<\/h2>\n

        Warning<\/strong>: Uploading media files<\/a> (images, documents, audio, and video) to a password-protected page does not<\/strong> protect the files themselves.<\/p>\n

        Some users attempt to link to a document from a password-protected page as a workaround. However, this does not secure the document itself.<\/p>\n

        To properly protect a media file, it will need to be uploaded to an external resource that allows for password protection (such as SharePoint). Once that is set up, you can add a link on your website to the resource.<\/p>\n

        \n

        External Resources<\/h2>\n

        To securely store and share sensitive content, use external services such as Microsoft Teams<\/strong>, SharePoint<\/strong>, or OneDrive<\/strong>, which offer built-in access controls.<\/p>\n

        \n

        Sensitive Information and Policies<\/h2>\n

        What is Sensitive Information?<\/h3>\n

        The University maintains an information classification standard that provides guidance on what is considered sensitive or classified data. Visit the following resources for more information:<\/p>\n

          \n
        1. Safe Computing<\/a><\/li>\n
        2. Information Classification Standards<\/a><\/li>\n<\/ol>\n

          Policies, Guidelines and Resources<\/h3>\n
            \n
          1. Privacy Office<\/a><\/li>\n
          2. Sensitive Information Storage Offerings<\/a> – outlines cost and storage options.<\/li>\n
          3. UNC’s Information Classification Standard<\/a> – explains information tiers.<\/li>\n
          4. UNC’s policy on Transmission of Sensitive Information Standard<\/a> – security policies for data transmission<\/li>\n
          5. What is sensitive information?<\/a> from the Safe Computing at UNC website.<\/li>\n
          6. Sensitive Information<\/a> – support for secure data handling.<\/li>\n
          7. School of Medicine’s\u00a0Information Security and Privacy web site<\/a>. The site contains a wealth of information including best practices, HIPAA training, and other security related resources.<\/li>\n
          8. Need guidance on what is not sensitive information? Reference the non-sensitive information examples<\/a> from the Safe Computing at UNC website.<\/li>\n<\/ol>\n

            If you need additional guidance on handling sensitive data, refer to the Safe Computing website or contact the School of Medicine\u2019s Information Security and Privacy team.<\/p>\n

             <\/p>\n","protected":false},"excerpt":{"rendered":"

            Sensitive Information Restrictions Sensitive information, including Protected Health Information (PHI), cannot be stored on any School of Medicine website, even if the content is password-protected. While password protection provides a layer of security, it is not strong enough to safeguard sensitive information. For more details, see the resources at the bottom of this page. Password … Read more<\/a><\/p>\n","protected":false},"author":3206,"featured_media":0,"parent":2168,"menu_order":26,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"layout":"","cellInformation":"","apiCallInformation":"","footnotes":"","_links_to":"","_links_to_target":""},"class_list":["post-11866","page","type-page","status-publish","hentry","odd"],"acf":[],"_links_to":[],"_links_to_target":[],"_links":{"self":[{"href":"https:\/\/www.med.unc.edu\/webguide\/wp-json\/wp\/v2\/pages\/11866","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.med.unc.edu\/webguide\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.med.unc.edu\/webguide\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.med.unc.edu\/webguide\/wp-json\/wp\/v2\/users\/3206"}],"replies":[{"embeddable":true,"href":"https:\/\/www.med.unc.edu\/webguide\/wp-json\/wp\/v2\/comments?post=11866"}],"version-history":[{"count":0,"href":"https:\/\/www.med.unc.edu\/webguide\/wp-json\/wp\/v2\/pages\/11866\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.med.unc.edu\/webguide\/wp-json\/wp\/v2\/pages\/2168"}],"wp:attachment":[{"href":"https:\/\/www.med.unc.edu\/webguide\/wp-json\/wp\/v2\/media?parent=11866"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}