Webflow gated content: members-only pages, folders and files

A shared password or member gating

Webflow gated content comes from one of two routes: Webflow's own password protection, which gives a page, folder or whole site one shared password, or a member tool that gates by login and plan. Webflow removed its content gates when User Accounts (also called Memberships) ended on January 29, 2026. For one shared password, Webflow's page protection on a paid Site plan is enough. For paying members only, a member tool such as Outseta is the answer.

Webflow's own password protection

Password protection needs a Site plan, Webflow says. Webflow's pricing page lists Basic at $15 a month billed yearly or $25 a month billed monthly, per site, as read on October 23, 2026. Webflow's help center names its paid Site plans Basic, CMS, Business and Ecommerce, while its pricing page lists Basic and Premium Site plans plus three Ecommerce plans, so we use the names on the pricing page.

• A page: toggle on Password protection in the General section of the Pages panel.
• A folder: each folder can have its own unique password.
• A Collection template page: all its auto-generated pages show the password page.
• The whole site: a site-wide password overrides page and folder passwords.

A shared password is one secret for everyone, not a member account.

Gating pages and folders by plan

Outseta's tool for this is a content group: pages or folders hidden unless the member's plan or add-on allows them. A rule can use Starts with to protect an entire folder, or Equals to protect one specific page. Visitors without access, including anyone not logged in, go to a page you choose.

Outseta's article does not name Webflow CMS items, so Outseta does not state whether a rule covers a Collection's pages. The only CMS case it documents is the Webflow app publishing an account-specific page as a CMS item when a member signs up. Memberstack's docs say it can gate a page, a folder or a CMS collection.

Hiding single elements and account pages

To hide one block instead of a whole page, Outseta uses custom attributes: data-o-plan-content shows or hides an element by plan, and data-o-authenticated does it by login state. An account-specific page is a protected page that only members of one account can open, such as a per-member dashboard. The Webflow app can publish such pages as CMS items when a member signs up.

Files and sensitive content

Webflow says files you upload are not restricted: they are publicly available and discoverable, so a password on the page does not protect the file.

Outseta describes its gating as JavaScript-based, and its help article names the weak point: a tech-savvy user could disable JavaScript and reach protected content. An optional enhanced protection script redirects visitors who disable JavaScript.

For content that must never reach non-members, Outseta calls the fix hard gating, where the server checks the member before sending content, and it points custom-coded sites to an open-source AI Agent Toolkit. Memberstack likewise says its front-end gating is not a fully secure solution. This is not security advice.

Outseta's content groups protect a Webflow page or a whole folder by membership plan or add-on and send everyone else to a page you choose, on every plan from Start. Webflow paywall plugin covers the tools that put content behind payment, and Webflow membership site shows the full build.

Content groups can be set up inside Outseta's trial, which its pricing page text gives as 14 days and the structured data (code for search engines that visitors do not see) behind it as 7 days, converting to a paid plan unless you cancel.