Support

1. 1 Go to the Locket listing on the Shopify App Store and click Install.
2. 2 You'll be redirected to your Shopify admin to approve permissions. Click Install app.
3. 3 Locket opens automatically. Follow the setup checklist on the dashboard.

Locket uses Shopify's Theme App Extension system, so you need to enable it in your theme once. It then runs automatically on every page and survives theme updates.

1. 1 In your Shopify admin, go to Online Store → Themes.
2. 2 Next to your active theme, click Customise.
3. 3 In the theme editor, click the App embeds icon (puzzle piece) in the left sidebar.
4. 4 Find Locket in the list and toggle it on.
5. 5 Click Save.

You only need to do this once. The Locket dashboard will show a green tick next to "Theme embed active" once it detects the embed is enabled.

1. 1 Install Locket from the Shopify App Store.
2. 2 Once installed, go to Settings in the Locket app.
3. 3 Scroll to "Have a promo code?" and enter your code (e.g. BEAUTY90).
4. 4 Click Apply — your free trial will be activated immediately.

1. 1 In the Locket app, go to Locks and click Create lock.
2. 2 Enter a name for the lock (e.g. "Wholesale Access") — this is just for you, customers don't see it.
3. 3 Under Targets, click Add products.
4. 4 Search for and select the product you want to protect.
5. 5 Scroll down to Passwords and click Add password. Type your chosen password.
6. 6 Make sure the Enabled toggle is on, then click Save.

Visit the product on your storefront to confirm the password prompt appears.

Follow the same steps as creating a single-product lock, but in the Add products picker select multiple products at once. All selected products will share the same lock and password.

Locking by collection means every product inside that collection is automatically protected — including any products added to it in the future.

1. 1 Go to Locks → Create lock.
2. 2 Enter a name for the lock.
3. 3 Under Targets, click Add collections.
4. 4 Search for and select the collection(s) you want to protect.
5. 5 Add a password and click Save.

Note: If a product belongs to multiple collections and only one of those collections is locked, the product will still be locked. Locket applies the lock if any of a product's collections are targeted.

Locking by vendor protects all products where the Vendor field matches your chosen value — useful if you stock a brand that requires restricted online sales.

1. 1 Go to Locks → Create lock and enter a name (e.g. "ZO Skin Health").
2. 2 Under Targets, click Add vendor.
3. 3 Type the vendor name exactly as it appears in your Shopify products (it is case-sensitive).
4. 4 Add a password and click Save.

Tip: Check your product vendor spelling under Products → [any product] → Organisation → Vendor. If your products say "ZO Skin Health" and you type "ZO skin health", the lock will not apply.

Locking by tag protects all products that have a specific tag. This is useful when you want to group products across different collections or vendors under one access rule.

1. 1 Go to Locks → Create lock and enter a name (e.g. "Prescription Only").
2. 2 Under Targets, click Add tag.
3. 3 Type the product tag exactly as it appears in Shopify.
4. 4 Add a password and click Save.

Tip: Product tags are case-sensitive. Verify the exact tag under Products → [any product] → Tags.

Yes. You can add multiple targets of different types to a single lock — for example, a specific product and a vendor. A product is locked if it matches any of the lock's targets.

On the Locks list page, each lock has an Enabled toggle. Switching it off pauses the lock — the password prompt disappears from your storefront — without deleting any settings. Toggle it back on to reactivate instantly. You can also toggle from inside the lock editor.

1. 1 Open the lock in the Locket app.
2. 2 Scroll to the bottom and click Delete lock.
3. 3 Confirm the deletion.

Deleting a lock removes its targets, passwords, and magic links permanently. This cannot be undone. If you just want to pause it, toggle it off instead.

The introduction text is a short message shown to customers above the password field on a locked product page. Use it to explain why the product is restricted, or give customers instructions on how to get access.

If you leave the intro text blank on a lock, Locket uses the shop-wide default text you set in Settings. If neither is set, no intro text is shown.

1. 1 Open the lock in the Locket app.
2. 2 Find the Introduction text field.
3. 3 Type your message (see formatting options below).
4. 4 Click Save.

Wrap the text in double asterisks:

**your text here**

Example:
Enter your **trade password** below to continue.
Displays as: Enter your trade password below to continue.

Use this format: [link text](https://your-url.com)

Example:
Visit our [trade portal](https://yourstore.com/pages/trade) to register for access.
Displays as: Visit our trade portal to register for access.

Use the same link format but with mailto: before the email address:

[hello@yourstore.com](mailto:hello@yourstore.com)

Example:
Email us at [hello@yourstore.com](mailto:hello@yourstore.com) to request the password.
Displays as: Email us at hello@yourstore.com to request the password.

Press Enter to start a new line. Locket preserves line breaks exactly as you type them.

Example:

The blank line between the two paragraphs creates a visual gap in the storefront.

Yes — all formatting options work together. Example:

1. 1 Open or create a lock.
2. 2 Scroll to the Passwords section.
3. 3 Click Add password and type your chosen password.
4. 4 Click Save.

Passwords are stored using argon2id hashing — the plaintext is never saved anywhere.

Passwords cannot be edited in place — to change one:

1. 1 Delete the old password by clicking the delete (trash) icon next to it.
2. 2 Click Add password and enter the new password.
3. 3 Click Save.

Customers who already unlocked the product with the old password will remain unlocked for up to 24 hours. After that, they will need to enter the new password.

Yes — on the Pro plan you can add multiple passwords to a single lock. This is useful when different groups of customers need their own password (e.g. a wholesale team and a VIP group).

1. 1 Open a lock and scroll to Passwords.
2. 2 Click Add password, enter a label (e.g. "Wholesale team") and the password.
3. 3 Repeat to add more passwords.
4. 4 Click Save.

Any valid password will unlock the product. Customers only need to know their own group's password.

Yes — on the Pro plan, each password has its own Enabled toggle. Disabling a password means it will no longer unlock the product, but you can re-enable it later without re-entering it. Useful for temporarily revoking access to a specific group.

Yes. Passwords are case-sensitive. If your password is Summer2025, entering summer2025 will not unlock the product. Make sure you share the password to customers with the correct capitalisation.

The exemption list lets specific customers bypass all locks in your store without needing a password. This is useful for staff, trusted wholesale accounts, or VIP customers who should always have full access. The customer must be logged in to their Shopify account for the exemption to apply.

1. 1 In the Locket app, go to Exemptions.
2. 2 Click Add customer.
3. 3 Search by name or email and select the customer.
4. 4 Click Add.

That customer will now see all locked products without being prompted for a password, as long as they are logged in.

1. 1 Go to Exemptions.
2. 2 Find the customer and click the remove (×) icon.

The customer will be asked for a password on their next visit to a locked product.

No — exemptions apply to all locks in your store. If you need per-lock access control, use Customer Tag Auto-Unlock (Pro plan) instead, which lets you assign different Shopify customer tags to different locks.

Tag auto-unlock lets you automatically grant access to a specific lock based on a customer's Shopify customer tag. Any logged-in customer with a matching tag will see locked products without being prompted for a password. Unlike the exemption list, this is per-lock — so customer group A can unlock Lock 1 and customer group B can unlock Lock 2.

1. 1 First, tag your customers in Shopify: go to Customers → [customer] → Tags and add a tag (e.g. wholesale or vip-2025).
2. 2 In Locket, open the lock you want to configure.
3. 3 Scroll to Customer tag auto-unlock.
4. 4 Click Add tag and type the tag exactly as it appears in Shopify.
5. 5 Click Save.

Any logged-in customer with that tag can now view the locked product without a password.

Yes. A customer with any of the listed tags will be auto-unlocked. Simply add multiple tags to the same lock.

A magic link is a special URL that unlocks a lock automatically when clicked — no password required. You generate the link in Locket and share it however you like: email, SMS, QR code, or anywhere else. When a customer clicks it, they are instantly taken to your store with the lock lifted for their session.

Good uses: email marketing campaigns, QR codes at events, influencer access, press previews, trade show follow-ups, VIP drops.

1. 1 Open a lock and scroll to Magic unlock links.
2. 2 Click Generate link.
3. 3 Optionally add a Label (e.g. "May email campaign"), a Redirect path (where to send the customer after they click, e.g. /products/my-product), an Expiry date, or a Use limit.
4. 4 Click Generate and copy the URL that appears.

1. 1 The customer clicks the link.
2. 2 Locket validates the link and silently sets an unlock session in their browser.
3. 3 They are redirected to the page you set (or the homepage if no redirect was specified).
4. 4 The lock is lifted — the Add to Cart and Buy Now buttons are visible immediately.

The customer does not need an account or a password. The unlock lasts for 24 hours.

Expiry date: When generating a magic link, set an expiry date and time. After that moment, the link automatically stops working. Useful for closing presale access at a specific moment.

Use limit: Set a maximum number of clicks. Once reached, the link stops working. Useful for exclusive drops where you want to cap how many people get early access.

Both can be set together — the link stops whichever condition is reached first.

Each magic link shows a use count in the Locket admin next to the link label. This tells you how many times the link has been successfully clicked.

Disable: Toggle the link off. The URL will return an error if clicked. You can re-enable it at any time — the URL remains the same.

Delete: Click the delete (trash) icon. This is permanent — the URL will immediately stop working and cannot be recovered. If you need the link again you'll need to generate a new one (with a new URL).

A lock expiry date tells Locket to automatically lift the lock at a specific date and time. After the expiry, the locked products become publicly accessible without you needing to manually disable the lock. The lock itself is not deleted — it's simply treated as disabled until you remove the expiry or set a new one.

To set: Open the lock, find the Expiry date field, select the date and time, and click Save.

To remove: Clear the Expiry date field and click Save. The lock will remain active indefinitely.

1. 1 In the Locket app, go to Settings.
2. 2 Click Upgrade next to the plan you want.
3. 3 Complete Shopify's billing confirmation flow.

All features of the new plan are available immediately after confirmation. Billing is handled by Shopify and appears on your regular Shopify invoice.

Your configuration is preserved, but features outside your new plan become inactive:

• Downgrade to Starter: Expiry dates, tag auto-unlock, and magic links are ignored until you upgrade again. The data is kept.
• Downgrade to Free: Only your first lock remains active. Others are preserved but won't gate products until you upgrade.
• Uninstall: All data is permanently deleted within 48 hours, in line with Shopify's GDPR requirements.

Work through these checks in order:

1. 1 Theme embed enabled? Go to Online Store → Themes → Customise → App embeds and confirm Locket is toggled on. The Locket dashboard will also show a green tick when active.
2. 2 Lock enabled? Go to Locks and check the Enabled toggle is on.
3. 3 Target matches? For vendor and tag targets, the spelling must be an exact, case-sensitive match to the product's vendor or tag in Shopify.
4. 4 Lock expired? Check if an Expiry date has been set that is now in the past.
5. 5 Logged in as an exempt customer? Try visiting the product in an incognito/private browser window while not logged in.
6. 6 Hard-refresh the page. Press Ctrl+Shift+R (Windows) or Cmd+Shift+R (Mac) to clear the cache.

Ask the customer to:

1. 1 Refresh the page after entering the password.
2. 2 Check the capitalisation — passwords are case-sensitive.
3. 3 Try clearing browser cookies and cache, then entering the password again.

If the issue persists, contact support@beauii.com.au with the customer's browser and device details.

Unlock sessions last for up to 24 hours or until the customer closes their browser. If they cleared cookies or switched devices, they'll need to enter the password again. This is expected behaviour for security reasons.

1. 1 Confirm the customer is logged in to their Shopify account — exemptions only apply to logged-in sessions.
2. 2 Check you added the correct customer by searching by email in the Exemptions page.
3. 3 Ask the customer to log out, log back in, then visit the product again.

The Locket embed must be enabled in each theme separately. Go to Online Store → Themes → Customise → App embeds and re-enable Locket in your new theme, then save.

Check each of the following:

• Is the link enabled in the Locket admin (not toggled off)?
• Has an expiry date passed?
• Has a use limit been reached? (The use count will equal the limit.)
• Was the link URL copied correctly and not truncated?

If none of these apply, email support@beauii.com.au with the lock name and link label.

1. 1 Confirm the customer is logged in to their Shopify account.
2. 2 Check the tag in Locket matches the customer's Shopify tag exactly (case-sensitive).
3. 3 Ask the customer to log out, log back in, and visit the product again — customer tags are read at page load time.

Locket automatically hides Quick Add buttons on collection, search, and home pages for locked products. This runs via JavaScript and may take a brief moment after the page loads.

If Quick Add buttons remain visible: confirm the theme embed is enabled, confirm the product is targeted by an active lock. Some custom Quick Add implementations use non-standard HTML — if the issue persists, email support@beauii.com.au with your theme name.

All passwords are hashed using argon2id before being saved — a modern, memory-hard algorithm designed specifically for password storage. The plaintext password is never stored anywhere: not in the database, not in logs, not in Shopify metafields. Even Beauii cannot retrieve your passwords.

Once a customer successfully enters a password or clicks a magic link, their unlock session lasts 24 hours. After that, they will need to enter the password again. The unlock is tied to that browser and device — it does not carry over to other browsers, devices, or incognito windows.

Locket limits password attempts to 10 per IP address per 15 minutes. If that limit is reached, further attempts are blocked for the remainder of the window. We recommend using a reasonably complex password — avoid single words or obvious combinations.

All data associated with your store — locks, password hashes, targets, magic links, exemptions — is permanently deleted within 48 hours of uninstall, in compliance with Shopify's GDPR requirements.

Yes — create a separate lock for each product (or group of products) and set a different password on each. Each lock is fully independent.

The product will be locked. Locket checks all active locks — if any lock targets the product, it is protected. The customer only needs to unlock one of the matching locks to gain access.

Locket hides the Add to Cart and Buy Now buttons and Quick Add buttons for locked products — it does not remove products from listings or search results. Customers can still browse to the product page; they just see a password prompt instead of the purchase options. If you need to hide products entirely, Shopify's draft status may be a better fit.

Yes — Locket can complement Shopify B2B. You can lock your trade catalogue by vendor or collection, then use the customer exemption list or customer tag auto-unlock (Pro) so verified buyers never see the password prompt.

Locket uses Shopify's Theme App Extension system, which requires a standard Liquid-based Shopify theme. Headless storefronts using the Storefront API or Hydrogen are not currently supported.

Not directly — Locket works at the product level, not geographically. For geographic restrictions, you would need Shopify Markets or a dedicated geo-blocking app used alongside Locket.

Locket's password prompt runs in the browser storefront. The Shop app uses its own interface and may not apply the lock in all cases. We recommend testing your specific setup and contacting us if you encounter issues.

Email us at support@beauii.com.au with your shop URL and a description of the issue. We're a small Sydney team and aim to respond within one business day (AEST, Monday–Friday).