Protection
Every DontCode app is protected from day one. The Protection page shows what is already on for you, and what it stopped in the last 30 days: HTTPS on your domain, suspicious visits blocked, sign-in attempts stopped by limits on repeated failures, and checks your app must pass before each update goes live. Two extras are one switch away: two-step sign-in for your users and a bot check on your sign-up forms.
Where to enable it
Toggle this feature in your project editor. No code required.
Inside the editor, head to Protection.
Open in my projectRelated features
Password policies & MFA
Minimum password strength, rotation rules, and multi-factor authentication (TOTP). Configured in Users → Sign-in (Account security). MFA enrollment UI is built into the platform, no code needed.
Bot protection on sign in, sign up, and password reset
Keeps bots off your sign in, sign up, and password reset screens. Turn it on in Auth, Settings and we handle the rest. Most real visitors pass without seeing a puzzle.
App traffic analytics
A built-in dashboard on the Analytics page shows how busy your app is: total visits this month, your busiest day, the month-over-month trend, your 10 most-visited pages, and a daily chart. If your app is among the busiest DontCode apps this month, it says so. No code or outside analytics tool needed.