How do bots find and access password protected websites?

Topic summary

A Shopify store owner discovered bot traffic accessing their password-protected website and questioned how bots found and accessed it.

Key Points:

  • The store has password protection enabled
  • Analytics show bot activity from online scraping tools
  • Bots are attempting to scrape customer-facing website data

Resolution:

  • This bot traffic is normal and not a security concern
  • Shopify analytics automatically filters out this type of traffic within 48 hours
  • The filtering ensures accurate customer data in reports
  • No action needed from the store owner
Summarized with AI on November 20. AI used: claude-sonnet-4-5-20250929.

what it means
https://prnt.sc/bBvDqQuQv3jy
https://prnt.sc/yt8wIOZcIQJs
https://prnt.sc/Og8srOaLUhP0
are they bots?
and how they know my website
my website has password protection
https://prnt.sc/vm-Jjp_tUuvl

Hi @Sincalp

Thank you for the screenshots! Yes, those are online bot tools attempting to scrape your customer facing website data.

Your store analytics may update within 48 hours to remove this type of traffic from your analytic reports to ensure you are receiving accurate customer data. You can read more about that here.

This type of bot traffic is totally normal and nothing to be concerned about.

1 Like