Glossary: Access

Secret link

A secret link is a web address with a hidden token that lets anyone who has it view a restricted page or collection without logging in. It shares private content with a chosen audience without creating accounts.

  • Reviewed by Hoa Nguyen, Senior Marketer. Last reviewed
  • Last updated

In detail

A secret link works like a key in the URL. A page or collection stays locked for ordinary visitors, and a visitor who opens the link with the right token gets in. Sellers use it for a trade-show collection, an early look at a new range, a price list for one buyer or a private launch.

The strength of a secret link is also its weakness. Anyone who has the link can use it, and the link can be forwarded, pasted into a public post or saved in a browser history. It is a convenience for sharing, not an identity check, so do not use it for anything that needs proof of who the visitor is.

Treat the link as a bearer token. Use a long random value, share it with a limited group, and change it when the audience changes. If the content must stay out of search results, add a noindex setting yourself, because a hidden link is not automatically kept out of search engines.

A secret link sits between a passcode and a login. A passcode asks the visitor for a code they type in, and a login ties access to a named account. Pick a secret link when a quick, low-friction way in matters more than control, and a login when you need to know who bought.

Example

A brand shares yourstore.com/collections/trade-show?token=abc123 (an illustrative link) with 30 buyers it met at a trade show. They open the collection without an account, and visitors without the link see the lock message.

In BSS B2B apps

BSS B2B Lock has a secret link condition: the app reads a token from the link, and anyone who holds the link gets in. The link does not hide the page from search engines by itself, as noindex is a separate option. Lock rules on pages, products and collections keep the locked content out of the page HTML. Most Lock rule targets need a paid plan.

About BSS B2B Lock

Other condition dropdown with Secret link, Must access via a special link
The secret link condition in BSS B2B Lock.

Learn more

Read the Access control hub for guides, use cases and setup docs, or the complete Shopify B2B guide.

Back to the glossary