Skip to main content

Password Protection for Deal Rooms

Learn how Deal Room password protection works, how to enable it, and what buyers experience when accessing a password-protected room.

Updated today

Sales discussions may include sensitive information—pricing, strategy, legal documents, or competitive insights.


Password protection gives you an extra access barrier, ensuring only approved stakeholders can enter the room, even if the link is forwarded.

It is an optional security layer on top of the existing internal/external participant access model.


How to enable password protection

Only the room owner can change availability settings.

1. Open the Deal Room

Go to the room where you want to enable password protection.

2. Go to Settings → Availability

3. Toggle “Use password protection” on

GetAccept will automatically generate a secure password.
If you prefer, you can type your own custom password instead.

4. Share the password with your stakeholders

GetAccept does not distribute the password for you.
You must share it manually through email, SMS, calendar invite, or verbally.


What buyers experience

When an external participant opens the room:

  1. They enter their email

  2. They receive a verification code

  3. They enter the room password (if enabled)

After successfully entering the password once, they won’t need to enter it again until their access token expires.

Password session behavior

  • The password does not need to be re-entered during the same session

  • Access tokens last approximately 8 hours of inactivity

  • If the token expires, the participant must re-verify and re-enter the password

Internal users (collaborators, teammates, admins) never need to enter the password.


Important things to know

1. GetAccept does not send the password

Creating a password does not notify stakeholders.
You are responsible for sharing it.

2. Internal users are exempt

Room owners, collaborators, and internal teammates do not need the password.

3. Passwords apply at the room level

Everyone uses the same room password.
Individual passwords per user are not supported.

4. Passwords cannot be pre-set in templates

Because passwords must be unique per room, they cannot be configured at the template level.

5. Reset behavior

Every time you:

  • turn password protection off, then

  • turn it on again

→ a new auto-generated password is created.

If you prefer a stable password, always manually enter your own.


FAQ

Can I customize the password instead of using the auto-generated one?

Yes. After toggling the feature on, type your own password in the field.

Are passwords enabled by default?

No. Password protection is always off when a new room is created.
You must enable it manually for each room.

Do participants need to enter the password every time?

They must enter it on new sessions.
During the same browser session, a valid token allows them to continue without re-entering it—until the session expires (≈8 hours).

Does password protection work for internal users?

Internal authenticated users bypass the password entirely.


How GetAccept keeps password-protected Deal Rooms secure

Deal Rooms use a three-layer encryption model so that passwords and access credentials remain secure throughout their entire lifecycle.

1. Encryption in transit

All password data is encrypted using TLS 1.2+ during transmission.
Prevents interception or tampering during network communication.

2. Encryption at rest

Passwords are encrypted when stored in the database.
Protects against unauthorized access to stored information.

3. Encryption in use

Passwords remain encrypted even while being processed during verification.
This means the password is never exposed in plaintext, even in system memory queries.

Why this matters

Many systems only encrypt data:

  • when sent over the network, and

  • when stored

But GetAccept adds in-use encryption, reducing exposure even in the unlikely case of a database compromise.


Summary

Password protection adds a powerful, optional layer of security to your Deal Room by ensuring only approved buyers can access sensitive content.
It works alongside existing identity verification, secure session tokens, and GetAccept’s full encryption model to keep every room safe.

Did this answer your question?