Private research tools and reference
PASSWORD_HASH constant near the bottom of index.html, then re-upload.cPanel → Directory Privacy on your public_html folder (server-side .htaccess auth).
PASSWORD_HASH constant near the bottom of index.html, save the file, and re-upload.PASSWORD_HASH = "" with your generated hash. The hash is one-way — even with the hash visible in page source, the password cannot be recovered (though it can be brute-forced if weak; pick something strong).