---
title: "Remove a drop password"
method: DELETE
path: "/drops/{slug}/password"
---

# Remove a drop password

`DELETE /drops/{slug}/password`

## Request

- Base URL: `https://ship.page`
- URL: `https://ship.page/drops/{slug}/password`
- Auth: HTTP bearer

Owner-only, including after a paid plan lapses. Removes the gate so anyone with the URL can read the drop. No request body. Cancellation alone does not remove existing protection.

## Response `200`

Password removed; password_protected is false.

- PasswordResponse
  - `slug` string, required
  - `password_protected` boolean, required

## Other responses

- `401`: Missing or invalid credential.
- `404`: Not found (also returned for resources owned by someone else).
- `429`: Rate limited. Back off per the Retry-After header (60s).
- `503`: Required backend unavailable. Password creation and rotation fail closed when billing cannot be verified; retry later.

## Changes

- **2026-10-20** `99aad34506e8`: 56 warning
  - added the new `already_live` enum value to the `code` response property for the response status `401`
  - added the new `already_live` enum value to the `code` response property for the response status `404`
  - added the new `already_live` enum value to the `code` response property for the response status `429`
  - added the new `already_live` enum value to the `code` response property for the response status `503`
  - …52 more

[Operation history](https://skmtc.dev/ship/apis/ship-page/changes/drops/:slug/password/delete.md)

---

[API](https://skmtc.dev/ship/apis/ship-page.md) · [All operations](https://skmtc.dev/ship/apis/ship-page/llms.txt) · [OpenAPI document](https://skmtc.dev/ship/apis/ship-page/revisions/99aad34506e8?raw)