How to set up protected pages in Bubble

The simplest way to protect a page in Bubble is to add a redirect workflow on page load that checks if the user is logged in. If they aren’t, send them to your login page. For more sensitive data, use Privacy Rules so even if someone bypasses the UI, they still can’t load protected data.

What “protecting a page” means in Bubble

Bubble does not have “page permissions” built‑in. You protect a page by combining:

• A page load check that redirects users who shouldn’t be there.
• Privacy Rules that block access to sensitive data.

Step-by-step: Redirect users who shouldn't access the page

This ensures only logged-in users (or users with a certain field like role) can stay on the page.

• Open the protected page.
• Select the page element, then go to Workflow → Page is loaded.
• Add a workflow action: Navigate → Go to page.
• Add a condition like “When Current User isn’t logged in”.

// Workflow condition example
When Page is loaded AND Current User isn't logged in
    → Go to page: login

If you want a role-based restriction, use a field you created on the User type (e.g., role = "admin").

// Role-based access example
When Page is loaded AND Current User's role isn't "admin"
    → Go to page: home

Step-by-step: Protect the database with Privacy Rules

Redirects protect the UI, but Privacy Rules protect your data. This prevents someone from using the browser’s “Inspect” or an API call to access data they shouldn’t see.

• Go to Data → Privacy.
• Select the data type you want to protect (for example: Project).
• Create a rule like “When This Project's Owner is Current User → allow finding and reading fields”.
• Uncheck all permissions for “Everyone else”.

Most common mistakes beginners make

• Thinking a login redirect alone protects data. It doesn’t. Privacy rules do.
• Using only the built‑in “Page is not accessible unless logged in” setting — it hides the editor preview but doesn’t secure data.
• Forgetting to test in “Run as user” mode.

Once you combine both the page load redirect and privacy rules, your Bubble pages are properly protected.