By default, all published NeetoForms are public, meaning anyone with the link can visit and fill out the form. There can be instances when you might want to restrict the form to a specific target audience. For example, a university might want to restrict its form to be viewed and filled by only the students of the university, or a company might want to restrict responses from just its employees.
Restricting access to your form
Go to the Settings tab.
Click on the Access control setting.
Select the relevant access control.
Click Save changes.
Access control options
Pick the option that matches who should be able to fill out the form. Each one has its own dedicated article with a step-by-step walkthrough and screenshots.
Anyone who has the link — the default. Anyone with the form URL can submit the form. No login, password, or invitation needed.
The form is password protected — share the link openly but only let visitors who know a single shared password through. The visitor sees a password prompt and types the password to open the form. No email verification.
Only the invited people can submit the form — add specific email addresses up front. NeetoForm sends each invitee an email with a link to the form. Each invited person identifies themselves with Login with Google or by entering their email and a one-time 6-digit login code. This is the option people often have questions about — see its dedicated article for the full OTP walkthrough.
Only the people with emails containing certain keywords can submit the form — allow access by email pattern, for example anyone whose address contains @neeto.com. Visitors verify their email with a one-time login code, and only emails matching at least one of your keywords are let in.
Only the logged in users of this organization can submit the form — internal use only. Anyone who is an active team member of your NeetoForm workspace can submit; everyone else is sent to log in and is blocked if they are not on the workspace.
Switching between options at any time is safe — the form's URL stays the same, and the new restriction takes effect once you publish the form.