Skip to main content
Publishing turns your Lovable project into a live web app by deploying a snapshot to a URL you can share. Lovable hosts the published app for you: no servers to set up, and HTTPS included. Only the current version is deployed, and depending on your plan, you can control who can access the published app.

​
Quick start: publish your first project

Publishing takes two clicks, and the defaults work for most projects:
1

Click Publish

In your project, click the Publish button in the top-right corner of the editor, next to Share. On narrow windows it collapses to an icon without a label.
2

Click Publish again

The dialog suggests a website address ending in lovable.app and runs a basic security scan. Keep the defaults and click Publish, or adjust the address and audience first. When the deploy finishes, Lovable shows your live link.Lovable generates your site title, description, and icon while it builds your app. To change them, ask Lovable in chat. To check how each page appears in link previews and search results, see Site metadata is generated for you.
To push later changes, open the same dialog and click Publish changes. The rest of this page covers publishing from chat, every dialog option, site metadata, republishing and unpublishing, and who can publish and view your app.

​
Publish from chat

You can also ask Lovable in chat to publish for you instead of opening the Publish dialog. Try prompts like:
To request a specific Lovable subdomain:
Lovable respects all publish-related workspace settings and permissions. It checks your publish settings, runs the same security checks used by the Publish dialog, and schedules the deploy. Lovable asks for approval before publishing unless you have set the publish tool to auto-approve. You can also ask Lovable in chat to change who can see your site or connect a custom domain. It applies visibility changes before publishing and asks you to confirm before connecting a domain. To unpublish, use one of the options in the UI. Publishing from chat is treated as standard chat usage and consumes credits.

​
The Publish dialog, step by step

The quick start covers the defaults. This section walks through every option in the dialog, which shows everything on one page: your website URL, who can see the website, and a security check.
1

Open the Publish dialog

In your project, click the Publish button in the top-right corner. By default, editors and above can publish projects.When the publish dialog opens, Lovable automatically runs a Basic security scan in the background. The scan takes about 10 seconds and covers database misconfigurations, including row-level security (RLS) policy mistakes, plus dependency and connector risks.
2

Set your website address

  • On a first publish, edit the suggested URL directly in the Website URL field, or keep it as is. By default, your app is published to [url-subdomain].lovable.app, using your project’s URL subdomain.
    On Business and Enterprise plans, you can publish apps under a workspace-branded URL pattern, such as app-name.workspace-subdomain.lovable.app. Branded app URLs create a consistent workspace-level URL structure across all published apps and are configured in Settings → Workspace → Branded app URLs. See Publish apps with branded URLs to set this up.
  • When published, you can add a custom domain (available on paid plans), or change the subdomain later in Project settings → URL subdomain.
3

Choose who can see the website

Select the visibility row below the URL (for example, Visible to anyone with the link) to open the audience picker. Depending on your plan, you can control who can see the website:
  • Public: anyone with the URL can visit the published app (public website access)
  • Workspace (Business and Enterprise plans): only signed-in workspace members can visit the published app (private website access)
  • Custom (Business and Enterprise plans): grant access to the whole workspace, specific people, groups, or people outside your workspace invited by email. See Invite people outside your workspace.
Audience edits take effect when you select Publish (or Publish changes on a published project). See Who can see your published app for how website access works on each plan.
4

Check the security scan result

The dialog shows the outcome of the Basic scan on a single line: No security issues found when the scan passes, or the number of issues to review.
  • If the scan finds issues, select the row to open the Security view, where you can review and fix them. Findings do not block publishing by default, but you should resolve critical issues before making your app available.
  • For critical findings, the dialog shows the full scan details and offers the optional Deep scan for additional coverage.
The Deep scan is an optional agentic codebase review that usually takes around 4 minutes. It looks for application-code vulnerabilities such as exposed secrets, unsafe input handling, and authorization gaps.See Security overview and Project security view for more information.
Publishing controlsWorkspace admins and owners can enforce stricter publishing rules in Settings → Security → Privacy & security to help ensure insecure applications are never deployed. Block publishing with critical findings prevents publishing while error-level findings are unresolved.
5

Publish your project

When ready, click Publish. When the deployment is complete, Lovable confirms Your website is live with buttons to copy the link and visit the site, and a preview of how your site appears in search results. Click Edit next to your site’s title to check or change any page’s social and search appearance.After publishing your project, you can continue to iterate on it. To push updates later, open the dialog again and click Publish changes.
After publishing publicly, rerun your SEO review to unlock live checks for indexing, performance, accessibility, AI-search readiness, and Google Search Console setup.If you connect a custom domain, rerun the review so Lovable can help verify your domain in Google Search Console and submit your sitemap.

​
Site metadata is generated for you

Lovable generates your site’s metadata while it builds your app: the site title, meta description, and site icon (favicon) shown in browser tabs and search results. The social sharing image (OG image) shown in link previews is chosen when your site is served: Lovable uses an image you’ve asked it to set, or the latest screenshot of your app. Sites that aren’t publicly visible don’t get an automatic social sharing image. To change any of it, ask Lovable in chat:
Metadata is set per page, not once for the whole site. Lovable generates a unique title and description for every page of your app based on its content, and a page can have its own social sharing image too. That is why viewing and changing metadata goes through chat, where you can also target a specific page, for example: “Update the meta description of the pricing page.”
Metadata edits are treated as standard chat usage and consume credits, like any other build request. To check the result, open the page selector above the preview: each page has a Social card showing how the page looks when shared and a Search card showing how the page appears in search results. You can also reach the Social and Search cards while publishing:
  • In the Publish dialog, open the ⋮ menu in the top-right corner and select Social & search appearance, or click the favicon next to the website URL. Both options work whether or not your site is published yet.
  • Right after you publish, the Your website is live screen previews how your site appears in search results. Click Edit next to your site’s title to open the Social and Search cards in the page selector.
See Optimize your app for SEO and AI search for more information on optimizing your Lovable apps for search engines, social media previews, and AI systems.

​
Republish to make new changes live

Each time you publish, Lovable deploys a snapshot of your project to a live URL. Only the current version is deployed, and later changes are not automatically pushed live: when you keep working on a published project, republish to update your live app. To deploy new changes, click Publish, then Publish changes. Accepting a draft is not publishing. When you accept a draft, its edits join your project’s unpublished changes, and visitors see them only after you publish the project. When your published project has changes that are newer than the live version, a small dot appears on the Publish button. It tells you at a glance that you have updates to deploy, without opening the dialog. The dot clears once you publish. It stays hidden when there is nothing new to publish, and when you do not have permission to publish.

​
How to unpublish your project

You can unpublish and remove your live app in three ways: Once unpublished:
  • The live URL becomes inaccessible
  • Your project remains in the editor

​
Who can publish projects?

By default, editors and above can publish projects on all plans. On Enterprise plans, admins and owners can restrict who is allowed to publish externally to the web. Go to Settings → Security → Privacy & security → Who can publish externally and select:
  • Editors and above (the default)
  • Admins and owners
  • Owners only
Only a workspace owner can select Owners only or change away from it.

​
Who can see your published app

Website access control depends on your plan.

​
Free and Pro plans

Anyone with the link can visit your published app: publishing is always external to the web. You cannot restrict website access on these plans, so make sure you’re ready to share before publishing.

​
Business and Enterprise plans

You can choose who can access your published app from the visibility row in the publish dialog, which opens the Who can view your site? picker:
  • Public: Anyone with the URL can visit your published app. This is external publishing.
  • Workspace (shown with your workspace name): Only workspace members can visit the published app after signing in. This is internal publishing.
  • Custom: You compose the exact audience: the whole workspace, groups, individual members, and people outside your workspace invited by email. See Invite people outside your workspace.
This allows you to:
  • Build and share internal apps that stay private to your workspace
  • Show a private app to a client or contractor without adding them to your workspace
  • Prevent accidental external publishing
  • Support governance and compliance for sensitive data
Audience edits don’t take effect while you edit. When you select Publish (or Publish changes on a published project), Lovable updates who has access and sends any invite emails. Workspace admins and owners can also set a default website access policy for all published projects in Settings → Security → Privacy & security → Default website access. You can override the workspace default for individual projects in the publish dialog by choosing who can see the website. If unchanged, the project inherits the workspace default.

​
Invite people outside your workspace

On Business and Enterprise plans, you can give people outside your workspace viewer access to an internally published app, for example a client or a contractor, without adding them to your workspace and without making the site public. Project editors and above can manage the website audience.
1

Open the audience picker

In the publish dialog, select the visibility row to open Who can view your site?, select Custom, then select View and edit on the Custom card.
2

Invite by email

Type the person’s email address in the search field. For an address outside your workspace, an Invite option appears. Select it to add the person. They appear under Added, and a note such as Shared with 2 external people appears below the Custom card.If the workspace has turned off external invites, the email option doesn’t appear. If the workspace restricts external invites to your company’s verified domains, addresses on other domains show Only verified-domain emails can be invited and can’t be added.
3

Publish your changes

Select Done to close the picker, then Publish (or Publish changes on a published project). Lovable then sends each invited person an email and updates who has access. Until you select that button, invites are not applied and no emails are sent.
The invite email contains a link to your site. If the invited person already uses Lovable, they also get an in-app notification. To open the site, they sign in with the invited email address. If they don’t have a Lovable account yet, they can create one with that address. Their access is tied to their account after that and is marked with an EXT label in the audience list. Keep in mind:
  • Invites don’t expire. Removing someone from the audience revokes their access when you apply the change, and re-inviting an address sends a fresh email.
  • Workspace members can’t be invited as external viewers. Add them through the workspace, people, or group options instead.
  • You can add up to 10 email invites per update, and each address can receive at most 10 invite emails per day.
  • Workspace admins and owners can turn off external invites for the whole workspace with the External invites setting in Settings → Security → Privacy & security. People who were already invited keep their access.
  • Admins and owners can also restrict external invites to your company’s verified domains with the Who can receive external invites setting. Other addresses can’t be added, and the picker shows why.
  • Security insights flags internally published projects that have external viewers, so admins can review who has access.

​
Trust center

Externally published apps can also have a Trust center: a security page Lovable generates on your app’s own domain, with verifiable facts about how the app is served and built. Enable Trust center in Project settings → Publishing. Each publish is evaluated fresh, so the Trust center always describes the deployment that’s live.

​
FAQ

Yes. Ask Lovable to publish, deploy, ship, or go live, and it handles the deploy for you while respecting all publish-related workspace settings and permissions. It checks your publish settings, runs the same security checks used by the Publish dialog, and schedules the deploy. You can also request a specific Lovable subdomain, such as my-todos.lovable.app.Lovable asks for approval before publishing unless you have set the publish tool to auto-approve. You can also ask Lovable in chat to change who can see your site or connect a custom domain. It applies visibility changes before publishing and asks you to confirm before connecting a domain. To unpublish, use one of the options in the UI.Publishing from chat is treated as standard chat usage and consumes credits.
No. A published site stays live indefinitely. There is no expiry and no automatic unpublishing for inactivity. Only share preview links expire, after 7 days by default. Apps that use the built-in backend (Cloud) or AI features do need available credits to serve requests.
The Publish button sits in the top right of the editor. On narrow windows it collapses to an icon without a label, so look for it next to Share. You can also ask Lovable in chat to publish your app.
No. Publishing from the Publish dialog is free and works even when your credit balance is zero. Hosting the published app and running its built-in backend (Cloud) consumes Run credits as your app is used, and asking Lovable to publish in chat counts as a standard chat message.
Your published app stays live. Downgrading or canceling does not unpublish your project.
  • Website access settings keep working. If you restricted access to workspace members or selected people on a Business plan, the published app keeps requiring sign-in after a downgrade. The setting is enforced as stored. After a downgrade you can still change the setting to public access, which is available on all plans. Restricting access to workspace members or selected people requires a Business or Enterprise plan.
  • Connected custom domains keep serving your app. Connecting a new custom domain requires a paid plan, but domains that are already connected continue to work, and you can still disconnect them. Domains bought through Lovable are billed separately from your subscription, so their registration and renewal are not affected by a plan change. See What happens to my custom domain if I downgrade or cancel my plan?
  • Apps that use the built-in backend (Cloud) or AI features still need available credits to serve requests. See Credits and usage.
No. Publishing only makes the app available at the published URL. It does not grant anyone access to your project in the editor or your project code, and it does not make your project automatically remixable.Access to the editor, source code, chat history, and unpublished changes is always controlled by project access.
Project access and website access are independent settings. You can combine them in different ways depending on your needs.
  • Project access controls who can access the project in the editor, including source code, chat history, work in progress, and changes that have not yet been published.
  • Website access controls who can visit the published app at its live URL.
Below are common configurations:
  1. Internal team app
    • Project access: Workspace
    • Website access: Workspace Result: Only workspace members can view and edit the project in the editor and visit the published app.
  2. Private work-in-progress, public app
    • Project access: Restricted
    • Website access: Public Result: Only you can view and edit the project in the editor, but anyone with the published URL link can visit the published app.
    Keep in mind that workspace owners have full access to all projects in the workspace and can view and edit them.
  3. Team-built, publicly shared app
    • Project access: Workspace
    • Website access: Public Result: Only workspace members can view and edit the project in the editor, but anyone with the published URL link can visit the published app.
  4. Private prototype shared internally
    • Project access: Restricted
    • Website access: Workspace Result: Only you can view and edit the project in the editor, and only workspace members can visit the published app.
    Keep in mind that workspace owners have full access to all projects in the workspace and can view and edit them.
Key reminder: Publishing does not change who can access your project in the editor, and project access does not affect who can visit the published app.
Yes, on Business and Enterprise plans you can restrict who can access your published app.In the publish dialog, select the visibility row to open Who can view your site?, then choose your workspace to publish internally, or choose Custom to compose the audience: the whole workspace, specific people, groups, and people outside your workspace invited by email. See Invite people outside your workspace.
Invite them by email from the Custom audience in the publish dialog. When you select Publish (or Publish changes on a published project), they receive an email with a link to your site, and people who already use Lovable also get an in-app notification.To open the site, they sign in with the invited email address, or create a Lovable account with that address if they don’t have one. Their access doesn’t expire, and it is marked with an EXT label in the audience list. Re-inviting the same address doesn’t send duplicate emails, and workspace members can’t be invited as external viewers.
Publishing deploys a snapshot. Changes aren’t automatically pushed to your live app.To publish updates, click Publish and then Publish changes.
You can customize how your site appears in browser tabs, search results, and link previews.Lovable generates your site metadata while it builds your app: the site title, meta description, and site icon (favicon). The social sharing Open Graph (OG) image is chosen when your site is served: Lovable uses an image you’ve asked it to set, or the latest screenshot of your app, and sites that aren’t publicly visible don’t get an automatic one. Metadata is set per page: Lovable generates unique values for each page of your app based on its content. To see how any page looks when shared and in search results, check its Social and Search cards in the page selector above the preview. To open the cards from the Publish dialog, select Social & search appearance in the ⋮ menu, or click the favicon next to the website URL. Right after you publish, you can also click Edit next to your site’s title on the Your website is live screen.To change any of it, ask Lovable in chat, for example:
Metadata edits are treated as standard chat usage and consume credits, like any other build request.See Optimize your app for SEO and AI search for more information on optimizing your Lovable apps for search engines, social media previews, and AI systems.
You can change your project URL subdomain, which forms your lovable.app website address, in Project settings → URL subdomain: change the subdomain and click Update URL subdomain.On a first publish, you can also edit the URL directly in the Website URL field of the publish dialog before you publish.Note that renaming the project does not change the project URL, it only changes the project display name.On paid plans, you can also add a custom domain.
When a publish fails, Lovable shows a Publishing failed message explaining what went wrong, along with the action to take: Try again for temporary issues, or Try to fix to have Lovable investigate an error in your app. See Troubleshooting for each failure type and how to resolve it.If the Publish button is disabled instead, there are two common causes:
  • The button shows You don’t have permission to publish this project when you hover it: publishing needs editor access or above, and on Enterprise plans workspace admins and owners can restrict publishing further. See Who can publish projects?
  • Your workspace admin or owner enabled Block publishing with critical findings in Settings → Security → Privacy & security. It prevents publishing while error-level findings are unresolved. Open the Security view, fix them, and try again.
First check that the publish finished: the dialog confirms Your website is live when the deploy completes, and shows a Publishing failed message when it didn’t. See Troubleshooting for the failure types.Then check that you’re opening the exact published URL. The lovable.app address uses your project’s URL subdomain, which can differ from the project’s display name, and changing the subdomain moves your site to the new address. If you use a custom domain, DNS changes can take time to take effect.
Yes, especially if your site is public. Some SEO checks only run against the live published site, including indexing, performance, accessibility, AI-search readiness, and Google Search Console setup.After publishing, run an SEO review to check your live site. If you connect a custom domain later, run the review again so Lovable can re-check the new host, verify Google Search Console, and submit your sitemap.
Lovable builds web apps and publishing always deploys to a web URL (for example, yourproject.lovable.app or your custom domain). There isn’t a built-in flow that packages and submits your project to the App Store or Google Play, but you have two good options if you want an installable, store-ready experience:
  • Progressive Web App (PWA): make your published app installable so users can “Add to Home Screen” and launch it like a native app, with offline support and a full-screen shell. This is the fastest path and works from any modern mobile browser.
  • Capacitor wrapper: wrap your published URL in a native shell with Capacitor outside of Lovable, then submit that shell to the App Store or Play Store. This is the right path when you need access to native device APIs (camera, push notifications, biometrics, etc.) or when a store requires a “real” native binary.
Lovable does not generate projects in React Native, a developer framework for building native mobile apps. If you need a React Native app, use Lovable to prototype your app’s screens and flows in the browser, then rebuild them with React Native outside of Lovable.The separate Lovable mobile app is for building projects from your phone. It does not turn your project into a native app for end users.

​
Troubleshooting

When a publish fails, a Publishing failed banner appears in the Publish dialog with a message explaining what went wrong and how to resolve it. When the failure is something Lovable can help with, it already knows the details, so you can ask for help in chat.
The publish hit a short-lived problem, such as a timeout or a rate limit on a connected service.What to do: Click Try again in the banner. Retries usually succeed.
The publish failed because of something in your app’s code, such as a build error or an edge function that couldn’t be deployed. When the cause is a build error, the banner shows a short summary of the build error instead of this message.What to do: Click Try to fix in the banner. Lovable investigates and applies a fix, and you can publish again when it’s done. You can also describe the issue in chat. If the fix request can’t be sent right away, for example because you hit a rate limit, the banner stays visible so you can try again.
A configuration problem inside your project blocked the publish, for example a file that is too large to include.What to do: Click Try to fix in the banner. Lovable resolves the configuration problem, and you can publish again when it’s done.
The publish failed because of a connection or setting outside your project that Lovable can’t change for you, such as an expired Supabase connection or a connected service that reached its plan limits.What to do: Fix the underlying setting, for example reconnect the integration or update its plan or quota, then click Try again.
A database change in this publish conflicts with data that already exists in your live app’s database.What to do: Click Ask the assistant to help in the banner. Because the fix affects real data, Lovable confirms with you before changing anything.
The failure happened on Lovable’s side and is not something you can resolve by changing your app or its configuration.What to do: Try publishing again after a few minutes. If the failure persists, contact support and include your project link.
Publish failure messages never include raw logs or output from connected services, so secrets and connection details stay out of the UI. Build errors and conflicting database changes are the exceptions: the banner shows a summary of the build failure or the database’s own error message so you can act on it.

Related topics

Chat with Lovable to build your appSync your Lovable project code with GitHub or GitLabAdd payments to your appProjects in LovablePublish apps with branded URLs