---
title: "Update Access Customizations"
method: PUT
path: "/medias/{mediaId}/customizations/access"
tags: ["Customizations"]
---

# Update Access Customizations

`PUT /medias/{mediaId}/customizations/access`

## Request

- Base URL: `https://api.wistia.com/modern`
- URL: `https://api.wistia.com/modern/medias/{mediaId}/customizations/access`
- Auth: HTTP bearer

Applies a partial update to a video's password-protection settings. Only the
fields supplied are changed; sending a field as null deletes it.

## Requires api token with one of the following permissions
```
Read, update & delete anything
```

Tokens with the "Act with a team member's permissions" permission
(`all:delegate_to_contact_permissions` scope) can also be used. Requests
made with such a token are authorized using the permissions of the
contact assigned to the token.

An [expiring access token](https://docs.wistia.com/reference/post_expiring-token)
created with the `all:delegate_to_contact_permissions` scope and an
authorization granting the `edit` permission on this media can also be used.

## Path parameters

- `mediaId` string, required

## Headers

- `X-Wistia-API-Version` string, required

## Request body

- object: Password-protection settings for a video. Partial update; send a field as null to clear it. The password you send is stored encrypted.
  - `private` object
    - `password_protect_on` boolean: Whether password protection is enabled for the video.
  - `encrypted` object
    - `password_protect_password` string: The password viewers must enter. Stored encrypted; also returned by the show endpoint.
  - `plugin` object
    - `passwordProtectedVideo` object
      - `on` boolean: Whether the password-protection plugin is enabled.
      - `challenge` string: Optional challenge/prompt text shown to viewers.
      - `src` string: Internal source marker for the protection plugin.
      - `async` boolean: Whether the password check is performed asynchronously.

## Response `200`

Access customization update successful

- object: Explicitly-set password-protection settings. Values are returned as strings. Includes the stored password under `encrypted` (redaction tracked in sc-65366).
  - `private` object
    - `password_protect_on` string
  - `encrypted` object
    - `password_protect_password` string
  - `plugin` object
    - `passwordProtectedVideo` object
      - `on` string
      - `challenge` string
      - `src` string
      - `async` string

## Other responses

- `400`: Bad request
- `401`: Unauthorized, invalid or missing token
- `403`: Forbidden, token is valid but account does not have access to feature
- `404`: Resource not found
- `500`: Internal server error

## Changes

- **2026-11-03** `b86cb2a7b420`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/wistia/apis/data-api/changes/medias/:mediaId/customizations/access/put.md)

---

[API](https://skmtc.dev/wistia/apis/data-api.md) - [All operations](https://skmtc.dev/wistia/apis/data-api/llms.txt) - [OpenAPI document](https://skmtc.dev/wistia/apis/data-api/revisions/b86cb2a7b420?raw)