A request, not a lock
Well-behaved crawlers follow robots.txt, but it does not stop anyone from opening a page. Protect private pages with a password instead.
Create a robots.txt file with blocked paths, a sitemap link and rules for AI crawlers such as GPTBot, ClaudeBot and CCBot.
Allow crawlers on the whole site except chosen paths, or block the site entirely, for example on a staging server.
List folders to block, one per line, add exceptions and paste the full address of your XML sitemap.
Tick the AI crawlers you do not want collecting your pages, then copy the file or download robots.txt.
Well-behaved crawlers follow robots.txt, but it does not stop anyone from opening a page. Protect private pages with a password instead.
A blocked URL can appear in search results when other sites link to it. To keep a page out of Google, allow crawling and add a noindex tag.
Bing and some other crawlers respect Crawl-delay, but Google ignores it.
Not reliably. Robots.txt controls crawling, not access to a page, and a blocked URL can still be discovered through links. Protect private content with authentication. For public pages that should not be indexed, use an appropriate noindex directive rather than treating robots.txt as a privacy control.
No. Google-Extended controls whether your content is used for Gemini models. Google Search still crawls your site with Googlebot.
At the root of the host, such as https://example.com/robots.txt. Each subdomain needs its own file.
Add the folder to the blocked paths and the file to the allowed paths. Google and Bing apply the most specific matching rule.