Skip to main content

Password Protect a Shopify QR Campaign

· 3 min read
FlashWombat team
FlashWombat team
Shopify QR campaign guides

Some QR campaigns are intended for a smaller audience: event attendees, VIP customers, wholesale partners, creators, or subscribers with early access. FlashWombat can place a customer password between the campaign address and its destination.

Password protection applies to both named QR placements and the supporting campaign link because they resolve through the same parent QR campaign.

What Password Protection Does​

When a visitor opens a protected campaign address, FlashWombat shows a password page. A correct password continues to the configured product, collection, ready cart, raw URL, or smart destination. An incorrect password keeps the visitor at the gate.

The QR code remains dynamic: the merchant can change the destination later without changing the printed placement address.

When It Fits​

Password protection can support:

  • An event QR code with a password announced in the room.
  • A package insert for a selected customer group.
  • A creator or partner preview.
  • A private product or collection launch.
  • An early-access campaign shared through its supporting link.

Anyone who receives the password can pass it on. Do not treat this feature as identity verification.

Configure a Customer Password​

  1. Create or edit the QR campaign.
  2. Under status and lifecycle controls, turn on the customer password.
  3. Enter the password shoppers should use.
  4. Save the campaign.
  5. Open a QR placement and the supporting campaign link in private browser windows.
  6. Test an incorrect password and the intended password.
  7. Confirm the final destination after successful entry.

Removing the password later changes the access step, not the printed QR address.

Protect the Printed Experience​

Adding a password to a campaign that is already printed and in use introduces new friction. Review every deployed placement first and ensure the printed message tells the intended audience how to obtain the password.

FlashWombat warns before some changes that could affect deployed material, but the merchant remains responsible for the customer message and physical proof.

Use It as a Campaign Gate​

A campaign password is not a replacement for:

  • Shopify customer accounts.
  • Checkout authentication.
  • Staff access controls.
  • Storage or delivery of sensitive information.
  • A guarantee that an offer remains private.

Treat it like a shareable campaign code. It can narrow casual access, but it does not establish who a visitor is.

Configure the Feature​

Follow Configure an Advanced QR Campaign for the full set of advanced controls. If you need to create the parent campaign first, start with the Shopify QR campaign product path.