Get Help Your Way

OR

Updated: Jul 17, 2025

Security settings for your website

Warning: This article covers instructions for the New Website Builder, available to all accounts. If you are using the Legacy Website Builder (available only to accounts created before July 15, 2025), refer to our guide on publication security settings for a legacy website. Be sure to follow the steps that match the builder version you're using.

Security settings for your publication are managed within the Website Builder, where you’ll find the ability to enable a cookie banner and display your ToS and Privacy Policy for GDPR and CCPA compliance. You can also add a custom ToS link and configure subscriber login options to give you more control over access and privacy.


How to enable GDPR and CCPA compliance 

  1. From the left panel dashboard, go to Website > Builder
     
  2. The Website Builder will open with a preview of your site on the canvas. In the upper-right corner, click on the Settings icon to open your website settings.


     
  3. Your site settings will open on the General page. In the left column, click GDPR, CCPA, & Compliance.


     
  4. On this page, you can toggle the following options on or off. Changes are saved automatically.

    Show Cookie Banner: Enable this to display a cookie banner when someone first visits your site. This allows users to opt out of non-essential cookies.



    Signup ToS & Privacy Policy: Enable this to require subscribers to agree to your Terms of Service and Privacy Policy before subscribing by checking a consent box.

Pro Tip: To ensure full GDPR and CCPA compliance, both the Cookie Banner and ToS/Privacy Policy options must be enabled.
  1. (Optional) You also have the option to provide a custom terms of service link for your readers. To do so, add a URL to the Terms of Service text field. This URL will be accessible if the cookie banner is enabled on your website. Changes will be saved automatically. 


How to configure subscriber login options

  1. From the left panel dashboard, go to Website > Builder
     
  2. The Website Builder will open with a preview of your site on the canvas. In the upper-right corner, click on the Settings icon to open your website settings.


     
  3. Your site settings options will open on the General page. In the left column, click on Login.


     
  4. On this page, you can enable or disable the following login options for your subscribers. Changes are saved automatically when toggled.

    Use one-time password for login: Enable this to allow subscribers to log in to your publication site using one-time passwords instead of magic links.



    Use subscriber password for login: Enable this to let subscribers create and use a password to log in directly on your publication site.


One-time password (OTP) enabled subscriber view

This is what your subscriber will see if you have OTP and subscriber password enabled for your account:

Both OTP and password disabled subscriber view

If both OTP and subscriber password options are disabled, users will receive a magic link in their email to access your publication as a logged in subscriber.

Tech Note: For best results, enable OTP so subscribers can log in from any browser.

Related Articles

Want More Features?

Upgrade your plan to access more beehiiv tools and supercharge your growth

the one place to build
the one place to build
the one place to build
the one place to build
the one place to build
the one place to build
the one place to build
the one place to build
the one place to build
the one place to build
the one place to build
the one place to build