---
title: "Publication security settings for a legacy site"
updated: 2025-07-17
---

# Publication security settings for a legacy site

> **Warning**
>
> This article covers instructions for the Legacy Website Builder, only available to accounts created before July 15, 2025. If you are using the New Website Builder (available to all accounts), refer to our [guide on security settings for your website](https://www.beehiiv.com/support/article/33544946516375). Be sure to follow the steps that match the builder version you're using.

You can manage your publication’s security settings in the **Legacy Website Builder**, including enabling GDPR and CCPA compliance and setting subscriber login preferences.

## Where to enable GDPR & CCPA compliance

1.  **From the left panel, go to Website >** [**Builder (Legacy)**](https://app.beehiiv.com/website_builder)**.**  
     
2.  The **Website Builder** will open on the **Styles** tab. Switch to the **Settings** tab, then scroll down and click on [**Security**](https://app.beehiiv.com/website_builder/settings/security) in the left panel.  
      
    ![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXd2L8aZRsMe0uX8GRJpl-uczRhwmSPJBriAWJMAtw-b3bQb143sUdz9lEGDBeVu_B2VdDzjfkVtCWHm-ED_WX_irLpv-wYOmIMwoxR-JRQcJCqxLzw0oS_QOBsRWM4W-mddL5JETQ?key=ZJCYoQ_erYJ_1N12-7f94w)  
     
3.  The **Security** section will open. From here you can enable or disable the following security compliance options. Changes will be saved automatically.
    
    > **Pro Tip**
    >
    > To ensure full GDPR and CCPA compliance, both the Cookie Banner and ToS/Privacy Policy options must be enabled..
    
    **Cookie Banner:** Displays a cookie consent banner when someone visits your site. Visitors can choose to opt out of certain cookies.  
    **Signup ToS and Privacy Policy:** Displays your Terms of Service and Privacy Policy during signup. Enabling this means that subscribers must check a box to agree before signing up.  
      
    ![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXe8qdrsYW9ZVOQUbS0NZBEu6sC6setxG5ogqlanLfkEb0EwpdoJ-whzq8PtNsvfLpaqu9HrsEP1Nu5asvlHI8R1l8SdAPDVp-vY6k_i4qrCD9_E7hz1MpqLn_pWOx19X76fuKiY?key=ZJCYoQ_erYJ_1N12-7f94w)
    
4.  (Optional) To customize your Terms of Service and Privacy Policy, click on **Edit Signup ToS**. Enter your content in the **Terms of Service** field and click **Confirm** to save.  
      
    ![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXdDT6KGzCXheTMFlqCWZR93zByUOYoPGG0UyyNJ-CVQRy-pb7Qc37MSvuNNEG0i44ZWHJgiTI2hZIF7AjZN1qUHGx1pw-HuC9w_rl4FI94aPMkae5QcCJyWq3kF3T7_tSUulFBw2A?key=ZJCYoQ_erYJ_1N12-7f94w)

---

## Subscriber log in options

Below the compliance settings, you'll see the **Log In** options for your website. By default, **One-Time Password Login** is enabled. You also have the option to enable **Subscriber Password Login**.

To update either setting, toggle the option on or off. Changes are saved automatically.  
  
![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXckp76yVjfz-LcVCkDACO9WCrNSraEKAtZbFqZoZjn2b4Eh_rh2TGehySximU01-RlyW1a0zAlTHAXtWYUowLLnfWtBGnD2iLPNSED7kC3VsEiNMlFfZuLbiUhC9ig-yvlypo2Y8w?key=ZJCYoQ_erYJ_1N12-7f94w)

### One-time password (OTP) enabled subscriber view

This is what your subscriber will see if you have OTP enabled for your account:  
  
![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXfAlD0390LIsK2A6q6nQybPBnGKOPm_jEglSIcnrd8JULqjNXttH2jrLS6J2LnuVRAcY1X0MeqqufWFkDnrkvQV2mq7m9UUROIa2-X8TOnzJNFzYyzigUbs64SU45pv8u5ANwsyUw?key=ZJCYoQ_erYJ_1N12-7f94w)

### Both OTP and password enabled subscriber view

This is what your subscriber will see if you have OTP and subscriber password enabled for your account:  
  
![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXch_A16--gL7xjOLjAGWdwl-DfbmTeFiD6QaW0bdcDO6sE9LNea85_taZLlrarF5c7tqrRhZt7mFSrLHNkiiv54j2mIo3jkVnTSli2gNE3AabuYLFQCYBlJss8FYACk61golLEnnQ?key=ZJCYoQ_erYJ_1N12-7f94w)

### Both OTP and password disabled subscriber view

If both OTP and subscriber password options are disabled, users will receive [a magic link](https://www.beehiiv.com/support/article/13091534221079-how-to-use-magic-links-for-cross-newsletter-promotions#h_01J0CTJTG8E2D3XYYKV4VVZYD2-where-to-access-your-publication-s-magic-link) in their email to access your publication as a logged in subscriber.  
  
![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXeH_9A5-kDNSMb4l7WOMivVu3fkDUzPt1i8pGculu2DsgYsA0Dgn1OezajroBKyZlZV11C-rT9QvZSQtpyOYkSXqoV2-WPwJDVzhOtSB5TUuv_85chp56CiDgJ_T8BO6DJTiBO9QA?key=ZJCYoQ_erYJ_1N12-7f94w)

> **Tech Note**
>
> For best results, enable OTP so subscribers can log in from any browser.