You click a Yupoo link from a Reddit thread, and instead of albums you get a box asking for a password. Nothing on the page tells you what the password is, who has it, or whether the store behind it still exists.
This is normal, it is deliberate on the seller's part, and it has one consequence that matters more than the inconvenience.
Yupoo is a photo host, not a shop
Almost everything confusing about Yupoo follows from this. It is an album service — the kind a photographer would use — that rep sellers adopted because it is cheap, tolerant, and not a marketplace anybody polices. There is no cart, no checkout, and no account relationship between you and the seller. An album is a folder of photos with a caption.
Because it is an album service, it has an album-level privacy setting. That setting is the lock you just hit. It was never designed as a trade mechanism; sellers repurposed it as one, the same way they repurposed the caption field as a buy link.
Why a store locks itself
Sellers give a few reasons, and they are not all the same reason.
- Staying off the radar. A public store full of branded photos is trivially findable by anyone who would like it taken down. A locked one is not.
- Filtering out browsers. A password is a small tax that keeps a store to people who asked for access, which for a seller working out of WeChat is a feature rather than a cost.
- Wholesale-only stock. Some stores are aimed at people reselling, not at individuals, and the lock marks the boundary.
- Copy protection, in intent at least. Rep sellers copy each other's photos constantly, and a lock is a gesture at stopping it.
None of these tells you anything about the quality of what is behind the door. A locked store is not a better store, and it is not a worse one. It is a store you cannot see.
How buyers actually get the password
There is no lookup. The password comes from the seller or from somebody who already has it, which in practice means one of:
- Messaging the seller on WeChat or WhatsApp and asking.
- A Discord server where the store is discussed and the password is pinned.
- A Reddit comment, which is where most of them leak, and where most of them go stale.
- A spreadsheet entry, with all the staleness problems that implies — see rep spreadsheets explained.
Passwords change. A comment from 2023 giving you a password is a comment that describes a store as it was in 2023, and there is no way to tell from the outside whether it still opens.
We do not publish passwords on this site, including for stores where our own corpus happens to contain one. A password is something a seller chose to give to specific people, and republishing it is not ours to do.
The part that actually matters
Here is the consequence, and it is the reason this page exists rather than being a footnote.
A locked store cannot be checked against the record. Everything this site does rests on being able to look at what a seller sells and compare it to what buyers said about them. When the store is locked, the second half of that is gone. You are left with comments about a shop you cannot open, describing stock you cannot see, at prices you cannot confirm, from a date that may predate every change since.
Naisan23 is the clearest example in our corpus. It is password-gated, its quoted record is old, and there is no way to reconcile the two. That guide is built entirely around the problem rather than around the seller.
So the honest advice is not "avoid locked stores". It is: treat the lock as a missing column in your evidence, and weight everything else accordingly. If the only thing you have is a five-year-old comment and a door you cannot open, you have less than you think.
Locked, empty, and gone are three different things
They look similar from outside and they are not the same, so it is worth knowing which one you are looking at.
- Locked renders a password prompt. The store may be thriving.
- Empty renders an album list with nothing in it — Yupoo says as much in Chinese. The account exists and has no stock. One of the stores in our corpus is in exactly this state.
- Gone is a 404 or a dead subdomain. The account is finished.
Anyone quoting a store to you should be able to say which of the three it is. If they cannot, they have not looked recently.
If you get in
Once you are past the door, the store behaves like any other and the usual reading applies — the buy link lives in the caption, not on a button, and plenty of albums have no link at all. How to read a Yupoo album covers that, and the link decoder will rebuild a working buy link from whatever URL you find, including ones whose agent shut down years ago.
If you are weighing the seller rather than the stock, how to evaluate a rep seller is the better starting point, and the raw quoted record for every seller we hold is on the sellers index.