Sharing store password with app developer

[Velfella]

Hi...

Is it ok to share my store password with an app developer?

My store is unpublished and password protected.

From what I gather giving the store password only allows them to see how the site works, and not make any changes...is this correct?

Do I simply send them the password and they find the site themselves?

Thank you in advance for any help on this matter.....

[Huptech-Web]

Hello @Velfella , You can ask them to send a collaborator access request for your store. And also you can manage the section you want them to access.

[PageFly-Theodor]

Hi @Velfella ,
This is Theodore from PageFly - Shopify Page Builder App.

Don't share your Shopify store password with app developers, even for unpublished stores. It's a security risk and app developers typically don't need it.

There are safer options:

• Grant specific permissions within your Shopify admin panel for the app to function.
• Create a test store with sample data and provide login credentials for that.

Best regards,
Theodore | PageFly

[Velfella]

Hi...thanks for the response...I am still a bit confused but want/need to be sure about secruity. I am trying to work out if there are two passwords on Shopify:

1. the password to the admin side of the website

2. a password that I can find by clicking on Online Stores > then Preferences > at the top it says that "Your Online Store is password protected" > when you scroll down there is a heading "Password Protection" > a click box with "Restrict access to visitors with a password".

It is this second password that the developers are asking for...is this ok to give? I am trying to work out if this password only allows them to have a look at the site as if it was live, but cannot buy anything/change anything.

If this is so, is it safe to give?

Thanks again.....I guess there is always the option of creating a test store, but it seems that the issue is with my current theme.

[PageFly-Theodor]

Shopify has two passwords:

1. Admin Password (Never Share): Grants full access to your store's management. Keep this private!

2. Store Password Protection Password (Don't Share): Limits who can see your storefront but doesn't guarantee security. Developers don't typically need it.

For safe collaboration with developers, use the Theme Access app (creates limited access passwords) or create a test store with sample data they can access instead of your live store. This way, you keep your store secure while they work on your theme.

[tim · Accepted solution]

If they're talking about storefront password, https://help.shopify.com/en/manual/online-store/themes/password-page then it's totally safe -- this does not give access to anything other than your site when it's password protected. 

Same access as your visitor will have when you remove this password.

However, if they want to have password to your admin -- you should be careful.

Never give password to your own account.

Approving their collab access request (with proper access perissions selected) is always the better option.