Securely password-protect sensitive forms

  • elatt
    Asked on April 9, 2019 at 1:27 PM

    Hi there, I've looked at previous posts regarding this feature:
    https://www.jotform.com/answers/1370112-How-to-set-a-password-for-my-form

     

    This solution is easy to apply, but I was wondering if there is an actual way to secure a form so that tech-savvy people can't find the password through the source code?

    My idea was to hide the form on a website page (embed) behind a password-lock hosted by the actual website. Though this works fine, will people still have access to the form in other ways outside of the website?

    What I mean is will people be able to find the shared link for the form online somehow or are all form links hidden unless the owner shares them?

     

    Thanks

  • stevenmarshall
    Replied on April 9, 2019 at 3:28 PM

    UPDATE (August 20, 2019): Password protection feature is available now. 

    Here is how it works:

    1. Open the Form Builder and find the Enable Password Protection option under the Settings tab. 

    Securely password protect sensitive forms Image 10

    2. If you select this option, you should set a password for the form. If you don't set any password, the Enable Password Protection option will be unselected.

    1566296147Screen Shot 2019 08 20 at 10 Screenshot 21

    3. When you set a password for the form, a person who wants to open the form will see this page:

    1566296207Screen Shot 2019 08 20 at 10 Screenshot 32

    4. If the person enters the incorrect password, s/he cannot open the form and will see this warning:

    1566296231Screen Shot 2019 08 20 at 10 Screenshot 43

    5. If the person enters the correct password, s/he can open the form and submit it. However, if you (form owner) change the password after s/he opened the form, s/he cannot submit the form and will see this warning:

    1566296247Screen Shot 2019 08 20 at 10 Screenshot 54

    6. You can reset the password by clicking on the RESET PASSWORD button or unchecking the Enable Password Protection option.

    1566296263Screen Shot 2019 08 20 at 11 Screenshot 65

     

     

    Hello @elatt,

    Once you embed a form to your website, it will be possible to be searched and would be available online to be indexed by Google or any other search engines.

    There are a few different options you can do to secure a form that you create. One like you mentioned above.

    Such as Password protection and hide the form on the webpage (embed).

    Our forms are already secure since it uses SSL in the form submissions. 

    Please view Security link below:

    https://www.jotform.com/security/

    But do take note that this method of setting password protection is not securing the form. Any person with understanding on how to read source code can figure out what is the password/access code of the form.

     

    Hope this was helpful.

    Please let me know if you have any other questions or would like any more help!

    Thank you very much and have a great day!




  • Nur Karabağ JotForm Developer
    Replied on August 20, 2019 at 6:52 AM

    UPDATE: Password protection feature is available now. 

    Here is how it works:

    1. Open the Form Builder and find the Enable Password Protection option under the Settings tab. 

    Securely password protect sensitive forms Image 10

    2. If you select this option, you should set a password for the form. If you don't set any password, the Enable Password Protection option will be unselected.

    1566296147Screen Shot 2019 08 20 at 10 Screenshot 21

    3. When you set a password for the form, a person who wants to open the form will see this page:

    1566296207Screen Shot 2019 08 20 at 10 Screenshot 32

    4. If the person enters the incorrect password, s/he cannot open the form and will see this warning:

    1566296231Screen Shot 2019 08 20 at 10 Screenshot 43

    5. If the person enters the correct password, s/he can open the form and submit it. However, if you (form owner) change the password after s/he opened the form, s/he cannot submit the form and will see this warning:

    1566296247Screen Shot 2019 08 20 at 10 Screenshot 54

    6. You can reset the password by clicking on the RESET PASSWORD button or unchecking the Enable Password Protection option.

    1566296263Screen Shot 2019 08 20 at 11 Screenshot 65