<strong>Access Token for Crawlers:</strong> Some visitors cannot type a username and password: a search engine crawler, an uptime check, a headless front end. Generate an access token in the settings and let them through with an <code>X-Basic-Auth-Token</code> header, or an <code>Authorization: Bearer</code> one. The token opens the site only, never the admin area or the login page, and it exists only if you generate it.