You choose the security level
A required password for all your clients, or access with a shared code. The setting is made at the agency level.
Client access
Invite link, password, access code, expiry date: you decide who gets in, and until when.
7-day trial, card required · Live in 5 minutes
The short answer
With XTablo, you secure client portal access four ways: an invitation link, a required client password (an agency-level setting), a shared access code and a portal expiration date. Your client logs in on a page in your colors, with forgot password built in. These settings are included in every plan, from €49 per month excl. taxes (about $55).
Updated by Baptiste Belleville, founder of XTablo
At a glance
Why it matters
A required password for all your clients, or access with a shared code. The setting is made at the agency level.
You set a portal expiration date. The project is done, the access stops.
Your client resets their password from the portal page. You’re no longer pulled in for that.
How it works
Who it’s for
You deliver a site and want only your client to find their mockups and files. You turn on the required password and your client creates their account from your invitation link.
Several people on the client side need to read the reports. On top of the invitation link, you add a shared access code that you share with them.
Your engagement lasts three months. You set a portal expiration date, and the portal closes at the end without you having to think about it.
XTablo offers four methods, which you can combine. The invitation link is the most direct: you send it to your client and they land on the portal page. The required client password is an agency-level setting: when it’s on, every client must create a password to get in. The shared access code works when several people at the same company need the same portal: you share a code on top of the invitation link. Finally, the expiration date closes the portal on a date you choose. All of these options are included in all three plans: Freelance, Agency and Founder. You don’t need to upgrade to secure your clients’ access. On the team side, Google login is available for signing in to the Studio.
Your client lands on your portal page, not on a generic screen. Login, sign-up and forgot password are all on that page, in your colors and with your logo. If your client loses their password, they reset it themselves, without writing to you. For you, that’s one less follow-up. For them, it’s a portal that looks like your agency, which is reassuring at the moment of logging in. If your client works with several agencies that use XTablo, one account is enough to move between them. And if you use your own domain, for example portal.youragency.com, the login page shows up on that address. The own domain is for Agency and Founder plans only. Otherwise, your youragency.xtablo.com address is included in every plan.
They see only what you show them. Every item in a project is either internal or visible to the client: you decide, item by item. You can also choose the visible apps, for the whole agency or project by project. A project can even stay internal only, with no client portal. On the team side, roles apply: members, admins, and an Editor or Viewer role per project. Your working notes stay with you, and your client sees their steps, their files and the discussion. One honest note: the “Powered by XTablo” mention is always shown, discreetly, on the portal. These settings work together: you can, for example, require a password, share a common code with your client’s team and set an end date, all on the same project.
| Today (email, WhatsApp, Drive…) | With XTablo | |
|---|---|---|
| Client entry | A shared folder link, sometimes open to anyone. | An invitation link and a login page in your brand. |
| Password | Handled by each tool, or by nobody. | Required client password, agency-level setting. |
| Forgot password | The client emails you, you follow up. | The client resets it from the portal page. |
| End of engagement | You remember to remove access by hand, or you don’t. | Portal expiration date. |
| What the client sees | The whole folder, or nothing. | Only items marked visible to the client. |
FAQ
It’s an agency-level setting. You choose whether to require it for your clients.
Yes. You share the invitation link and a shared access code with the people concerned.
Yes. You set a portal expiration date, useful for a fixed-length engagement.
Yes. The portal page offers login, sign-up and forgot password, in your agency’s colors.
No. They’re included in every plan. Only your own domain is reserved for the Agency, Business and Custom plans.
Agency members can log in with Google. The Editor and Viewer roles set what each person can do per project.
From the blog
Explore other features