Description

Ensure projects whose production site must not be public, such as internal tools, admin dashboards, and sites not yet launched, use Vercel Authentication with the All Deployments option, so that the production domain and all generated URLs require a Vercel login.

Rationale

Standard Protection keeps preview URLs private, but the production domain stays open to everyone. For internal or unreleased applications, this means anyone on the internet can reach the production site. Selecting All Deployments protects every URL of the project, including production, and is now available at no extra cost on every plan.

Impact

  • The production domain requires a Vercel login

  • Only users with project access can open the site

  • Not suitable for public websites

Default Value

By default, new projects use Standard Protection, which leaves the production domain public. All Deployments is available on every plan at no additional cost.

Pre-Requisites

  • Team Owner or Member role, or Project Administrator

  • Confirmation that the production site should not be public

Test Plan

  1. Sign in to Vercel at https://vercel.com.

  2. Select your team from the team switcher.

  3. Select the project from the dashboard.

  4. Open Deployment Protection (Security > Deployment Protection in the project sidebar, or Settings > Deployment Protection on older dashboards).

  5. Verify that Vercel Authentication is enabled with All Deployments selected.

  6. Open the production domain in a private browser window and confirm the Vercel login page appears.

  7. If the production domain is public and should not be, follow the implementation steps.

Implementation Steps

  1. Sign in to Vercel at https://vercel.com.

  2. Select your team from the team switcher.

  3. Select the project from the dashboard.

  4. Open Deployment Protection (Security > Deployment Protection in the project sidebar, or Settings > Deployment Protection on older dashboards).

  5. Enable Vercel Authentication and select All Deployments from the dropdown.

  6. Select Save.

Backout Plan

  1. Sign in to Vercel at https://vercel.com.

  2. Select your team from the team switcher.

  3. Select the project from the dashboard.

  4. Open Deployment Protection (Security > Deployment Protection in the project sidebar, or Settings > Deployment Protection on older dashboards).

  5. Select Standard Protection from the dropdown.

  6. Select Save.

Reference