Control who can visit your published app

Website access controls who can visit your published app at its live URL. On every plan you can leave the app open to anyone with the link, or name the people who may open it. Business and Enterprise plans add your whole workspace and groups. An Enterprise workspace in an organization can open the app to everyone in the organization. This page covers choosing the audience, inviting people outside your workspace, and answering requests from people who have no access. To get an app live in the first place, see Publish your Lovable project. To change who can open the project in the editor, see Control project access.

​

Who can see your published app

You choose who can access your published app from the visibility row in the publish dialog, which opens the Who can view your site? picker. The options it offers depend on your plan. When you select Publish (or Publish changes on a published project), Lovable updates who has access and sends any invite emails.

​

Free and Pro plans

The picker shows three rows. Two of them are available on your plan:

• Public: Anyone with the URL can visit your published app. This is the default.
• Invite only: Only people you add can visit the published app, after logging in. Add workspace members by name, or invite people outside your workspace by email. You can invite up to 10 people per project. See Invite people outside your workspace.

The third row, Workspace, is not available to you: publishing to your whole workspace or to groups requires a Business or Enterprise plan. The project owner, workspace owners, and people the project is shared with directly can always open an invite-only site.

​

Business and Enterprise plans

The picker has three options, and Enterprise workspaces in an organization have a fourth:

• Public (external publishing): Anyone with the URL can visit your published app.
• Workspace (internal publishing, shown with your workspace name): Only workspace members can visit the published app after logging in.
• Custom: You compose the exact audience: the whole workspace, groups, individual members, people in your organization, and people outside your workspace invited by email. See Invite people outside your workspace.
• Your organization (Enterprise workspaces in an organization, shown with the organization’s name): Members of every workspace in the organization can visit the published app after logging in. See Publish to your organization.

Custom is the same option that Free and Pro plans call Invite only, widened to admit the workspace, groups, and your organization as well as people you name. With these options you can:

• Build and share internal apps that stay private to your workspace
• Show a private app to a client or contractor without adding them to your workspace
• Share an app with colleagues in other workspaces of your organization

Workspace admins and owners can also set the default audience for all published projects with Default published app access in Workspace settings → Security → Privacy & security → Publishing. You can override the workspace default for individual projects in the publish dialog by choosing who can see the website. If unchanged, the project inherits the workspace default.

​

Publish to your organization

When your Enterprise workspace belongs to an organization, you can publish an app to everyone in the organization. Colleagues in other workspaces of your company can then open it, and the app stays private. To publish to the organization:

1. In your project, click Publish.
2. Select the visibility row to open Who can view your site?.
3. Choose the option named after your organization.
4. Select Publish (or Publish changes on a published project). When the dialog confirms Your website is live, members of every workspace in the organization can open the app after logging in to Lovable.

External collaborators, people with a pending invitation, and people outside the organization cannot open the app through this option. A colleague who has never joined a workspace in the organization must join one first, for example by invitation or through the organization’s SSO. Viewing the app does not give anyone access to the project itself. Visitors log in to Lovable to open the app. A visitor who has no access can request it. Colleagues in other workspaces of your organization are not people outside your workspace, so you do not invite them by email. To give one colleague from another workspace access without publishing to the whole organization, choose Custom and search for them by name or email. The picker offers only people who already belong to a workspace in the organization. To give access to the organization and to specific people, for example a client outside the company, choose Custom and add both. The Custom card then includes the organization in its summary of who has access. The option appears only on the Enterprise plan, and only when your workspace belongs to an organization. If both are true and you still do not see it, Lovable has set a publishing policy that does not allow publishing to the organization. Contact your account team.

​

Invite people outside your workspace

You can give people outside your workspace viewer access to an internally published app, for example a client or a contractor, without adding them to your workspace and without making the site public. Project editors and above can manage the website audience. The invite email contains a link to your site. If the invited person already uses Lovable, they also get an in-app notification. To open the site, they log in with the invited email address. If they don’t have a Lovable account yet, they can create one with that address. Their access is tied to their account after that and is marked with an EXT label in the audience list. These rules apply to external viewers:

• Invites don’t expire. Removing someone from the audience revokes their access when you apply the change.
• Adding an address that is already in the audience sends no second email. To send a fresh invite, remove the person and add them back.
• Workspace members can’t be invited as external viewers. Add them by name instead. On Business and Enterprise plans, you can also add the whole workspace or a group.
• On Free and Pro plans, you can invite up to 10 people per project.
• Each address can receive at most 10 invite emails per day from one workspace.
• On Business and Enterprise plans, workspace admins and owners control external viewer invites for the whole workspace from Workspace settings → Security → Privacy & security → Publishing. They can set External viewer invites to Off, or limit invites to specific email domains. Your company’s verified domains are always allowed.
• People who were already invited keep their access when an admin or owner changes that setting.
• On Business and Enterprise plans, Security insights flags internally published projects that have external viewers, so admins can review who has access.

​

Approve requests to use your published app

When someone outside the audience opens an internally published app, they can ask you for access instead of contacting you outside Lovable. They log in to Lovable, see You don’t have access, and select Request access. They add an optional message, then send the request. Requests arrive in your Inbox, which you open from the user menu under your avatar. Each request shows who asked, their email address, the app they want, and any message they wrote. Requests go to everyone who can manage that app’s audience:

• The project’s owner.
• Project editors and above.
• Workspace admins and owners, except on a Restricted project they were not invited to.

Lovable emails the project’s owner, or the workspace’s admins and owners. Everyone else sees the request in the Inbox without an email. Lovable emails the requester after you approve or decline. Select Approve to give the person access, or Decline. Approving adds them to the app’s audience and takes effect immediately, so you do not publish again. Someone still waiting on the page gets into the app within about 10 seconds, without reloading it. An approved person gets no access to the project itself, and does not join your workspace. If the app is published to your whole workspace, the first approval moves it to a Custom audience. That audience includes your whole workspace, so everyone who could open the app still can. When your workspace does not allow publishing at all, a workspace policy also blocks approvals, because approving gives someone access to a published app. A policy that only restricts public publishing leaves approvals working. You can still decline a request either way. A person whose request you decline can send a new one 24 hours later. Until then, they cannot ask again, and Lovable tells them when they can. A person whose access you remove can ask again immediately.

​

Who can ask for access to your app

Someone who is in neither your workspace nor your organization must verify their email address before Lovable accepts the request. Workspace members and colleagues in other workspaces of your organization skip that step. On Business and Enterprise plans, External viewer invites also decides who outside the workspace can ask. With Off, nobody outside your workspace can send a request. With Specific email domains only, only addresses on the domains you allow can send one. Lovable refuses an approval that the setting no longer allows.

​

FAQ