Why do users receive a "Passwords cannot be collected" popup when attempting to log in or sign up on our published Webflow site?
TL;DR
- Webflow blocks custom password fields on free or non-Ecommerce plans to prevent insecure password collection.
- To resolve the warning, remove the password input, use Webflow Memberships on a supported paid plan, or embed third-party auth securely.
You're seeing the "Passwords cannot be collected" popup on your published Webflow site because of a violation of Webflow’s security policies that prohibit custom password collection on free or non-Ecommerce plans.
1. Understand the Reason for the Warning
- Webflow blocks password fields used in custom forms (e.g., login/signup) when you're not using native Webflow features like Memberships or Ecommerce.
- This is a browser-level security alert triggered by Webflow’s infrastructure when detecting a
<input type="password">not supported by the current plan. - It aims to prevent phishing or the misuse of password collection on sites hosted with Webflow.
2. Check If You’re Using a Custom Form
- If you're using a custom login/signup form with an input set as type="password", Webflow flags this unless you're using:
- Webflow Memberships (available on certain paid plans)
- Webflow Ecommerce login functionality
- Free, Basic, and CMS plans do not support password collection via custom forms.
3. Recommended Solutions
- Use Webflow Memberships: If you need login/signup functionality, upgrade your project and use Webflow’s built-in Memberships feature to create secure authentication flows.
- Remove password inputs: If you're only collecting content or user input (not actual logins), change the input type from password to text or another appropriate type.
- Integrate a third-party auth system: If using an external platform (like Firebase, Auth0, or Memberstack), ensure that:
- Password entry happens outside of Webflow-hosted forms, or
- You embed the third-party auth UI via custom code or modals that Webflow does not directly process.
4. Check Your Plan Limits
- Free and lower-level plans prohibit password collection.
- To remove the warning and use secure login fields:
- Upgrade to a Business plan or an applicable Ecommerce plan that includes Memberships.
Summary
The “Passwords cannot be collected” popup appears because Webflow blocks custom password inputs on plans that don’t support secure authentication. To fix it, remove the password field or switch to Webflow Memberships or a secure third-party system on an appropriate paid plan.