PreviewFlow
Stop publishing early just to show a client. PreviewFlow turns any draft, pending, scheduled or private content into a private, shareable link you can send like a document link — and take back the moment you want to. No client accounts. No staging server. No temporary logins to clean up afterwards.
About this tool.
Stop publishing early just to show a client. PreviewFlow turns any draft, pending, scheduled or private content into a private, shareable link you can send like a document link — and take back the moment you want to.
No client accounts. No staging server. No temporary logins to clean up afterwards. You stay in control of who sees unfinished work, for how long, and on what terms.
The problem it solves
Reviewing unpublished content in WordPress has always been awkward. The built-in preview only works for someone already logged in, so agencies and freelancers end up doing one of four bad things: publishing a page early and hoping nobody notices, standing up a staging site for a single review, emailing screenshots that go stale immediately, or creating a throwaway user account that lingers for years as a security liability.
PreviewFlow replaces all four with one secure link.
How it works
- 01Write your post, page or product and save it as a draft.
- 02Open the Client Preview panel in the editor and create a link.
- 03Choose how long it should last, and add a password if you want one.
- 04Send the link. Your client opens it and sees the finished page.
- 05Revoke it in one click when the review is done.
Secure by design
Every preview link is a 43-character random token — roughly 256 bits of entropy, drawn from the platform’s cryptographic random source. It is not a guessable post ID or a predictable slug.
- Expiry — one hour, six hours, 24 hours, three days, seven days, 30 days, a custom date and time, or never.
- Instant revoke — kill a link and the very next request is refused.
- Optional password — hashed with WordPress’ own password hashing, with attempt rate limiting to stop brute forcing.
- Never indexed — noindex is sent in both the page markup and the HTTP response headers, so a preview cannot leak into search results.
- Never cached — preview responses are excluded from page caches, so a cached copy can never outlive a link you revoked.
- No login required — and no account is ever created for a reviewer.
