How to Download Images from Password-Protected Pages

Not all images live on public websites. Client portfolios, private Dropbox galleries, members-only photo libraries, and paywalled content all require login. The good news: if you can see the images in your browser, the extension can download them.

How login-protected downloads work

The extension works the same way your browser does:

• You visit a website and log in (email + password, or SSO like Google/Microsoft).
• The website sets a cookie in your browser that says "this user is authenticated".
• Every request your browser makes includes that cookie, so the server knows you have permission to access the page.
• The extension runs inside your browser and has access to the same cookies. It can access the same pages you can.

In other words: if you can see the images by visiting the page logged-in, the extension can download them.

Step by step: download from a login-required site

1. Open the website in your browser.
2. Log in (email, password, SSO, two-factor, whatever).
3. Navigate to the page with images you want to download.
4. Confirm you can see the images (they display in your browser).
5. Click the Bulk Image Downloader extension icon.
6. Download as usual.

The extension downloads with the same authentication your browser is already using.

Common login scenarios

• Email + password login: Log in on the website; extension downloads.
• SSO (Google, Microsoft, GitHub): Approve the login popup; extension downloads.
• Two-factor authentication (2FA): Complete the 2FA flow in your browser; extension downloads (no 2FA prompt for the extension because you are already authenticated).
• API token or API key: Some services require an API key instead of login. The extension cannot use API keys; you would need a custom script or CLI tool.
• Paywalled content (Medium, Substack): If you are a subscriber and logged in, you can see the content; the extension can access it.

Privacy and security

Logging in to download from private pages is safe if:

• You trust the website. You would not trust a website with your password anyway, so if you logged in, you should trust it with the extension.
• The extension is legitimate. Bulk Image Downloader is open-source and has no access to your login credentials; it only uses the authenticated session your browser already has.
• The connection is HTTPS. All modern logins use HTTPS (URL starts with "https://"). If it does not, do not log in anywhere.

The extension never stores your passwords or credentials. It only accesses what your browser can already see.

When login-protected downloads might not work

• JavaScript-only logins (SPAs): Some single-page apps require JavaScript interactions after login. The extension might have trouble if login state is stored in JavaScript memory, not cookies.
• Session expiration: If your login session expires (after 1 hour of inactivity, for example), the extension will fail. Re-login and try again.
• API-gated content: If the website uses an API token instead of cookies, the extension cannot authenticate. You would need to use the API directly or a custom script.
• Geo-blocking or IP restrictions: If the website blocks certain countries or IPs, the extension is still subject to the same restrictions.

At-a-glance comparison

Frequently asked questions