How to Passport York Protect Content

Passport York protection only applies to html pages, not to linked media (pdfs, docs, etc.) If you would like to post media and have it protected, please use YU Link.

There are two options available for protecting your content: protecting your entire site, and protecting individual pages.

Passport York-protecting an entire site:

  1. Log into your WordPress admin panel
  2. In the left panel, click through Settings > Reading
  3. Under Site Visibility (near bottom,) you will be given a list of options:
    • Select "" for a fully accessible site to everyone, including search engines
    • Select "Discourage search engines from indexing this site" to limit search engine access but allow any user to visit
    • Select "Visitors must have a login" to limit user access to anyone who has access to any WordPress Multisite at York (ie. a site with a url including '.info', '.lab', etc.)
    • Select "Only registered users of this blogs can have access" to limit user access to users listed as a website User (to see the list, in the left navigation click on 'Users')
    • Select "Only administrators can visit" to limit user access to site Administrators (to see the list, in the left navigation click on 'Users')
  4. Click 'Save Changes' to complete.

This allows you to restrict access to users who have some level of access to your site.

Passport York-protect selected pages using special URLs

This approach allows you to restrict page content to York Students/Faculty/Staff or just to Faculty/Staff using special URL naming conventions. Depending on which group needs access to your protected page(s), you will need to create a page with one of the following slugs:

/ppy_protected   (for York Students, faculty and staff)
/ppy_secure (For York faculty and staff)

    1. Create a new page
    2. Under 'Page Attributes' ensure that under 'Parent', '(no Parent)' is selected
    3. Write the Title of the page as you would like for it to appear on the live page
    4. Next to the Permalink url, click 'Edit' and change the url "slug" to one of 2 special names that will limit access: ppy_protected or ppy_secure.
    5. Click 'Ok' to save
    6. You can use these protected pages for PPY-protected content. Note you can also create any number of child pages such as /ppy_protected/my-first-protected-page, etc. All pages with a parent page of "ppy_protected" or "ppy_secure" will also require a PPY login to view.

Important: By default embedded images and linked PDFs and other uploaded media files will NOT be protected, since WordPress stores those files in a /files/year/month folder structure.  If you need to restrict access to media files, you would need to use the Media Library Folders plugin to create "ppy_protected" and/or "ppy_secure" folders and move files that need to be restricted into those folders.

UIT recommends that when confidential information needs to be shared, it be stored within YU Link (faculty and staff) or my.yorku.ca (students) if possible.