Figma Sites was released in open beta at Config 2025. Learn more about what’s included in the beta.
Who can use this feature
Available on the Organization and Enterprise plans
Figma offers two products that lets users with a Full seat publish to the web:
- Figma Sites enables designers, marketers, and developers to build and publish high-quality websites, such as blogs, landing pages, and project showcases.
- Figma Make is a prompt-to-app tool that turns ideas or Figma designs into interactive web apps and UI. Users can ideate, iterate, and publish by prompting AI or editing code directly.
By default, users can choose whether to publish their site or app on the open web, or restrict them to an internal audience. When publishing internally, members must be logged into your Figma organization to view the content.
For added security, admins on the Organization and Enterprise plans can disable external publishing entirely. On the Enterprise plan admins can also require passwords for all externally published sites and apps.
Disable web publishing
When web publishing is disabled, members of your Figma organization can only publish sites and apps so they are accessible by other people in the organization:
- Members logged into your organization will be able to seamlessly access the site or app at its published domain URL
- Members logged out of your organization will need to log into Figma before they can access the site or app
- Guests, or people who are not members of your organization, will not be able to access published sites or apps
Internal publishing is always enabled and cannot be turned off.
Tip: To help people at your company access internally published sites and apps, we recommend you enable single sign on and:
- Enforce SSO for members
- Set up SCIM with auto provisioning
- Assign Figma to all employees in your identity provider
To disable web publishing:
- From the file browser, click Admin.
- Select the Settings tab.
- In the External access section, click Web publishing and disable the feature.
Caution: When you disable web publishing, all published sites and web apps in your organization will be immediately unpublished, including those published to Community.
Require password protection on published sites and apps Enterprise
When web publishing is enabled, admins can require a password for every published site or app.
With password protection, visitors must enter a password to view the content—including metadata like the page title or description. Members of your organization won’t be able to publish their sites or web apps without adding a password. They also won’t be able to publish their files to Community.
Tip: For stronger security, you can also require auto-generated passwords rather than letting users pick their own.
To require password protection:
- From the file browser, click Admin.
- Select the Settings tab.
- In the External access section, click Web publishing.
- With web publishing enabled, click Require passwords for publishing, then press Save.
Caution: Enabling this setting affects currently published sites and apps:
- Any published sites or apps that don’t already have password protection will be immediately unpublished. People with edit access to the file will be prompted to add a password and republish when they next open the file.
- Any sites or apps published to Community—including those with password protection—will be immediately unpublished.