> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.noticeable.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Private Newspages 🔒

**Private Newspages allow restricting the visibility of your Newspages.  **

You can restrict accesses by using:

* a shared secret of your choice (password).
* a secret token (assuming your Newspage is used behind a proxy).
* IP addresses (IPv4, IPv6 or CIDR).

![Private Newspage requesting a shared password.](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2021-02-03-01-_1qhpwuj.png)

## Enabling Private Newspages

1. Open a project in the [Noticeable dashboard](https://dashboard.noticeable.io).
2. Select _Newspage_ in the left menu.
3. Identify the _Visibility_ settings group at the bottom of the page and click on it:

![](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2021-02-03-01-_1qtd4tt.png)

4. Enable the switch button next to the _Authentication_ or _IP Filtering_ sections and fill options as desired:

![](https://storage.crisp.chat/users/helpdesk/website/55d6234c11240c00/screenshot-from-2021-02-03-01-_6r6hxw.png)

## Note about Secret Tokens

When using authentication method _Proxies have to pass a secret token to retrieve the Newspage content_, you can use 2 manners to pass a secret token: a `token` query parameter and an `Authorization: Bearer XXX` header.  In both cases, it is highly recommended to use _HTTPS_.

### Authorization Header (recommended approach)

You can use an `Authorization` header of type Bearer. Let's say your secret token is `XXX` then the header key to use is `Authorization` and the value `Bearer XXX`.

### Query Parameter

Assuming your Newspage URL is `https://acme.noticeable.news` and your secret token is `XXX`, then you simple need to append the `token` query parameter to the Newspage URL and all other pages you browse: `https://acme.noticeable.news/?token=XXX`. 

||| A secret token is assumed to be used behind a proxy of your own. When a request is made to a Private Newspage, the token is NOT passed to other links in your private pages. This is to prevent a proxy to expose the secret token when the response is sent back. It is the job of your proxy to pass the secret token with each request as explained above.