Reviewed October 16, 2026

Shopify password page stuck: shoppers locked out after launch

If customers still see the password page after launch, or you cannot remove it, the cause is usually a setting, a domain, or a second store. A short diagnostic order.

Confirm which door is actually locked

First, be precise about the symptom. Visit your store’s main domain in a private window, then the exact address your ads and social profiles point to. Stores run into trouble when the custom domain shows the live store while an old address, a subdomain, or a link in bio still lands on a password page, and the reports sound identical.

Also confirm whether the whole store is behind the password or only some visitors see it. A password page that appears for customers but not for you usually means you are viewing an admin preview or a logged in session, which politely hides the lock your shoppers are staring at.

Check the password setting itself

In your store settings, find the storefront password controls and confirm password protection is actually turned off, not merely that you know the password. Knowing the password and removing protection are different states, and more than one launch has confused them while the team tested happily from inside.

If you turned protection off and the page persists, give it a few minutes and retest in a completely fresh private window or a different network. Cached versions of a password page can haunt a browser or a network briefly, and chasing a cache ghost through your settings creates real damage.

Domains and duplicate stores

Check that your primary domain is the one you think it is, that it is fully connected, and that traffic is not landing on a development store, an old store under a similar name, or a trial you abandoned. Password pages live on pre launch and development stores by design, and a wrong link in an ad account can send a whole campaign to a locked twin.

Domain forwarding deserves the same look: an old domain forwarding to the wrong destination, or forwarding that drops visitors on a non primary address with its own state, produces exactly the mixed reports that make this problem feel supernatural.

When the setting will not turn off

If password protection refuses to disable, check the usual blockers: a plan or billing state that limits the store, an app that manages coming soon or lock functionality overriding the setting, or a wholesale and access control app holding the storefront closed for its own reasons. Apps that lock stores are designed to win arguments with settings pages.

Remove or disable the locking app’s hold, retest, and only then escalate to platform support with your evidence assembled: the setting state, the domains tested, private window results, and the time you changed things. Support solves in one exchange what vague reports stretch into five.

Frequently asked questions

Why can I see my store but customers see a password page?

You are likely viewing through an admin session, a preview link, or a browser that already passed the password, while customers arrive cold. Always test storefront access in a private window or a device that has never logged in. Your logged in view is the least trustworthy witness to this problem.

How do I remove the Shopify storefront password?

In your admin settings for store details or preferences, depending on your version, find the password protection or storefront password section and turn protection off, then save and retest in a private window. If the control is missing or will not save, check for a locking app or a plan limitation next.

Can an app keep my store password protected?

Yes. Coming soon, wholesale lock, and access control apps can hold a storefront closed independently of the built in password setting, and they usually take precedence. Check any such app’s dashboard for its own enable state before concluding the platform setting is broken.

My password page shows on one domain but not another. Why?

Because the domains are not reaching the same store state: one may point at a development or old store, or forwarding may be misconfigured. Verify each domain’s connection and destination in your domain settings, set the correct primary domain, and retest every address your marketing uses.