Settings
Drupal 7 will no longer be supported after January 5, 2025. Learn more and find resources for Drupal 7 sites
Secure Site provides three methods of authentication: HTTP basic, HTTP digest, and HTML form. For more information on HTTP authentication, see RFC 2617.
Each method that you enable is available whether or not the user is prompted to authenticate. You can force users to authenticate all the time, when the site is under maintenance, or when they request a page they do not have permission to view.

If you give the anonymous user role permission to access secured pages, anonymous users can log in with a guest user name and password.

If you provide a message for the password reset form, the password reset form will be included on the HTML log-in page.
Help improve this page
You can:
- Log in, click Edit, and edit this page
- Log in, click Discuss, update the Page status value, and suggest an improvement
- Log in and create a Documentation issue with your suggestion