With Signed URLs on, every request must carry a signature and expiry generated with the project’s delivery key. Unsigned or expired requests are answered 403. Use this for member areas and paid galleries.
Signing is done on your server with the delivery API key from Settings. Default lifetime is one hour; you can set anything from five minutes to seven days.