Labs HQ

Sharing & Collaboration Guide

how to share public pages & passwords · no fibs

Two kinds of public pages

LabGate

Key-gated labs

Public (no login), but protected by a shared password. Anyone with the link + the password can enter.

Open

Open public pages

Fully public — no password, no login. Just share the link.

How to share a key-gated lab

1

Copy the page link

Grab the URL of the lab you want to share, e.g. your-app.base44.app/asa-explorer.

2

Share the access password

Send the shared lab password privately (not in a public post). One key unlocks every key-gated lab.

3

Recipient opens the link

No account needed — they land on the password gate, no login wall.

4

They enter the password

Access is verified server-side and persists for their browser session.

5

Collaborate

They can now use the lab alongside you in real time.

Try it — copy a share link

https://thehumanbrainapp.com/asa-explorer

Key-gated labs you can share

All key-gated labs share one password — unlock one, the rest open for the session.

Open public pages (no password)

Turn protection on / off (admin only)

Protection ON (default)

Page is public but asks for the shared password. Use this to keep access controlled without forcing sign-up.

Protection OFF

Page is fully open — anyone with the link can use it, no password. Use for open demos.

Admins toggle each lab from HQ → Lab Security. The setting is stored per-lab, so you control each one independently.

The shared passwords

Public lab password

secret: PUBLIC_LAB_ACCESS_KEY · every key-gated lab (ASA, Molecular, LLM, Linguistics, …)

Molecular Lab key

secret: MOLECULAR_LAB_ACCESS_KEY · alt key for /molecular-lab

LLM Lab key

secret: LLM_LAB_ACCESS_KEY · alt key for /llm-lab

Thoughts key

secret: MY_THOUGHTS_ACCESS_KEY · /my-thoughts

Passwords live as encrypted app secrets — you can't read them here. Manage their values in your app's Secrets settings, then share them privately (DM, email, 1Password) with collaborators.

For login-protected areas: invite a user

Pages behind login (HQ, Inventory, Mapper, Drafts) require a registered account. Invite a collaborator as a user or admin from HQ → User Management — they'll get an email to set up and join the app.

Do & Don't

Do

  • • Share the link and password in separate channels.
  • • Rotate the password if a collaborator leaves.
  • • Turn protection OFF only for demos you're fine being fully public.

Don't

  • • Don't post the password in a public Slack or social post.
  • • Don't reuse a personal password as the lab key.
  • • Don't leave protection OFF on labs handling sensitive data.

No Fibs — how sharing actually works here

Key-gated labs are public routes wrapped in a password check — the password is verified by a backend function against an encrypted app secret, never stored in the browser beyond the session. Open public pages have no gate at all. Login-protected pages (HQ, Inventory, etc.) use real account auth — those collaborators must be invited and register. Nothing here is fabricated: the gate behaviour is the same code that runs on every lab you see linked above.