Anyone with the link can look. Changes need the password, asked again each time the browser is reopened.