Securely password-protect sensitive forms

  • Profile Image
    elatt
    Asked on April 09, 2019 at 01:27 PM

    Hi there, I've looked at previous posts regarding this feature:
    https://www.jotform.com/answers/1370112-How-to-set-a-password-for-my-form

     

    This solution is easy to apply, but I was wondering if there is an actual way to secure a form so that tech-savvy people can't find the password through the source code?

    My idea was to hide the form on a website page (embed) behind a password-lock hosted by the actual website. Though this works fine, will people still have access to the form in other ways outside of the website?

    What I mean is will people be able to find the shared link for the form online somehow or are all form links hidden unless the owner shares them?

     

    Thanks

  • Profile Image
    stevenmarshall
    Answered on April 09, 2019 at 03:28 PM

    UPDATE (August 20, 2019): Password protection feature is available now. 

    Here is how it works:

    1. Open the Form Builder and find the Enable Password Protection option under the Settings tab. 

    15662961281.png

    2. If you select this option, you should set a password for the form. If you don't set any password, the Enable Password Protection option will be unselected.

    1566296147Screen Shot 2019-08-20 at 10.4

    3. When you set a password for the form, a person who wants to open the form will see this page:

    1566296207Screen Shot 2019-08-20 at 10.5

    4. If the person enters the incorrect password, s/he cannot open the form and will see this warning:

    1566296231Screen Shot 2019-08-20 at 10.5

    5. If the person enters the correct password, s/he can open the form and submit it. However, if you (form owner) change the password after s/he opened the form, s/he cannot submit the form and will see this warning:

    1566296247Screen Shot 2019-08-20 at 10.5

    6. You can reset the password by clicking on the RESET PASSWORD button or unchecking the Enable Password Protection option.

    1566296263Screen Shot 2019-08-20 at 11.0

     

     

    Hello @elatt,

    Once you embed a form to your website, it will be possible to be searched and would be available online to be indexed by Google or any other search engines.

    There are a few different options you can do to secure a form that you create. One like you mentioned above.

    Such as Password protection and hide the form on the webpage (embed).

    Our forms are already secure since it uses SSL in the form submissions. 

    Please view Security link below:

    https://www.jotform.com/security/

    But do take note that this method of setting password protection is not securing the form. Any person with understanding on how to read source code can figure out what is the password/access code of the form.

     

    Hope this was helpful.

    Please let me know if you have any other questions or would like any more help!

    Thank you very much and have a great day!




  • Profile Image
    nelly
    Answered on August 20, 2019 at 06:52 AM

    UPDATE: Password protection feature is available now. 

    Here is how it works:

    1. Open the Form Builder and find the Enable Password Protection option under the Settings tab. 

    15662961281.png

    2. If you select this option, you should set a password for the form. If you don't set any password, the Enable Password Protection option will be unselected.

    1566296147Screen Shot 2019-08-20 at 10.4

    3. When you set a password for the form, a person who wants to open the form will see this page:

    1566296207Screen Shot 2019-08-20 at 10.5

    4. If the person enters the incorrect password, s/he cannot open the form and will see this warning:

    1566296231Screen Shot 2019-08-20 at 10.5

    5. If the person enters the correct password, s/he can open the form and submit it. However, if you (form owner) change the password after s/he opened the form, s/he cannot submit the form and will see this warning:

    1566296247Screen Shot 2019-08-20 at 10.5

    6. You can reset the password by clicking on the RESET PASSWORD button or unchecking the Enable Password Protection option.

    1566296263Screen Shot 2019-08-20 at 11.0