# Access my dashboard on my phone

**URL:** <https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648>\
**Category:** Dashboard\
**Tags:** security, internet\
**Created:** [21 March 2024 22:40 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648 "2024-03-21T22:40:37Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![badflash](https://avatars.discourse-cdn.com/v4/letter/b/d6d6ee/32.png) [@badflash](https://discourse.nodered.org/u/badflash)\
**Post date:** [21 March 2024 22:40 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/1 "2024-03-21T22:40:37Z")

</div>

Node-Red is running on my PC. How to I access my dashboard on my phone?

---

<div class="post-metadata">

**Author:** ![gerry](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/gerry/32/21604_2.png) [@gerry](https://discourse.nodered.org/u/gerry)\
**Post date:** [21 March 2024 23:00 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/2 "2024-03-21T23:00:12Z")

</div>

Is the PC on your own network? Is your phone on the same network?

---

<div class="post-metadata">

**Author:** ![badflash](https://avatars.discourse-cdn.com/v4/letter/b/d6d6ee/32.png) [@badflash](https://discourse.nodered.org/u/badflash)\
**Post date:** [21 March 2024 23:22 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/3 "2024-03-21T23:22:38Z")

</div>

It can be, but I was hoping for a remote access thing. I played around with adafruit IO and you could access it from your phone. You just needed the web address. It used mqtt as well, but the OS was really slow and the adafruit IO dashboard was way too restrictive.

---

<div class="post-metadata">

**Author:** ![gerry](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/gerry/32/21604_2.png) [@gerry](https://discourse.nodered.org/u/gerry)\
**Post date:** [22 March 2024 00:10 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/4 "2024-03-22T00:10:03Z")

</div>

It is possible to access node red across the internet. However you might want to do a search on the forum first and then standby. There are a lot of strong feelings against doing what you propose. Me, I'm not going to wade in. But, it IS possible.

---

<div class="post-metadata">

**Author:** ![badflash](https://avatars.discourse-cdn.com/v4/letter/b/d6d6ee/32.png) [@badflash](https://discourse.nodered.org/u/badflash)\
**Post date:** [22 March 2024 00:25 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/5 "2024-03-22T00:25:34Z")

</div>

I did a search, several actually, but I came up with nothing. I am interested in IOT at very low cost. Using a cell phone to replace most of the hardware is VERY attractive to me. Why would anyone object? Security?

---

<div class="post-metadata">

**Author:** ![gerry](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/gerry/32/21604_2.png) [@gerry](https://discourse.nodered.org/u/gerry)\
**Post date:** [22 March 2024 00:31 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/6 "2024-03-22T00:31:17Z")

</div>

Yep, a very big attack vector

---

<div class="post-metadata">

**Author:** ![lost-rob0t](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/lost-rob0t/32/89180_2.png) [@lost-rob0t](https://discourse.nodered.org/u/lost-rob0t)\
**Post date:** [22 March 2024 05:18 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/7 "2024-03-22T05:18:59Z")

</div>

I would Recommend you use a VPN. then use ssh port forwarding to access the node red.  
I do no recomend exposing ssh port simply because of bots. a VPN is less likely to be bothered based on my router dashboard.

> **[SSH Tunneling: Client Command & Server Configuration](https://www.ssh.com/academy/ssh/tunneling-example)**
>
> SSH port forwarding is a mechanism in SSH for tunneling application ports from the client machine to the server machine or vice versa.

And there is a very simple way of setting a vpn up  
[https://www.pivpn.io/](https://www.pivpn.io/)

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [22 March 2024 09:59 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/8 "2024-03-22T09:59:25Z")

</div>

> [@badflash](#):
>
> I did a search, several actually, but I came up with nothing. I am interested in IOT at very low cost. Using a cell phone to replace most of the hardware is VERY attractive to me. Why would anyone object? Security?

It isn't that we object - what you do with your own systems and data is up to you. What we will do though, as a public community, is to warn you and everyone else who might read this thread, of the dangers/risks in what you are wanting to do.

Using Dashboard on your phone over a local network is easy enough, it is just a web page after all (though older and low-cost phones often struggle to cope with the weight of Dashboard 1 with its AngularJS v1 and other overheads, the new Dashboard 2 should be better hopefully).

But when you expose ANYTHING to the Internet, you are playing in global shark infested waters and things become more dangerous. At this point, there are a number of things you need to do (akin to locking your doors and windows when you leave the house).

Firstly, you need to make sure that only YOU (and anyone else you want to give access to) can access the page and that the data exchanged between you and the Dashboard is encrypted.

There are lots of ways to achieve this. But all of them have a learning curve.

Probably the easiest way is to use NGROK. This is a small app you run on your Node-RED server that creates a connection to a trusted 3rd-party server on the Internet. Once set up, you connect to the 3rd-party server from your phone rather than directly to your own server.

There are other, similar and more comprehensive solutions such as ZeroTier and Cloudflare Zero Trust, but they are generally a bit more complex to set up. All have free tiers though which should be more than enough for your use.

Note that such tools are MUCH better than a VPN for this kind of use - for reasons I can go into if people want me to but otherwise, I will leave unsaid for now.

Just make sure that you meet 2 requirements when using these tools:

1. ALWAYS have an encrypted connection. That means that your browser should show a valid `https` connection.
2. ALWAYS have a login with a strong passcode. Even if you only have 1 that you share with people.

---

<div class="post-metadata">

**Author:** ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)\
**Post date:** [22 March 2024 10:28 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/9 "2024-03-22T10:28:37Z")

</div>

It's very simple to access your Node-red from the internet; all you need is a DDNS service to associate a domain name with your home IP address and port forwarding on your router to allow access.

Unfortunately this will definitely attract automated attacks and the first thing you will know about it is when they have guessed your password and compromised your computers.

I have used PiVPN as suggested by @lost-rob0t but now I use Zerotier, no need for port forwarding on the router.

---

<div class="post-metadata">

**Author:** ![badflash](https://avatars.discourse-cdn.com/v4/letter/b/d6d6ee/32.png) [@badflash](https://discourse.nodered.org/u/badflash)\
**Post date:** [22 March 2024 13:13 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/10 "2024-03-22T13:13:41Z")

</div>

I have a secure website that I use for e-commerce. I can set up a username and password to get at a page. Is that enough security? What more would be needed? Totally new to this.

What are the mechanics of actually getting the webpage to post there?

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [22 March 2024 16:18 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/11 "2024-03-22T16:18:01Z")

</div>

This thread already contains everything you need to deliver an IOT Dashboard. I've already explained what you need to do as a minimum.

If you are now saying that you will use it for e-commerce, that is a VERY different beast. Because you would be LEGALLY responsible for quite a few things. Exactly what depends somewhat on what countries to intend to operate in. Also, how much YOU would need to take responsibility for and how much you might be able to hand off to a dedicated e-commerce 3rd party (e.g. for processing credit card payments) obviously we cannot guess as we don't know any details.

If all you want is to get Node-RED to access the e-commerce site and you control it via Dashboard, then what we've already shared will be sufficient.

> [@badflash](#):
>
> What are the mechanics of actually getting the webpage to post there?

Research, install and configure NGROK (or one of the similar tools) securely and allow access to your dashboard (using `http://localhost:1880/ui` as the INTERNAL page link. NGROK will give you an EXTERNAL page link that will include `https://....` - the exact URL will depend on how you configure NGROK. User ID's and Passwords should be provided by and managed in NGROK, not Node-RED.

---

<div class="post-metadata">

**Author:** ![badflash](https://avatars.discourse-cdn.com/v4/letter/b/d6d6ee/32.png) [@badflash](https://discourse.nodered.org/u/badflash)\
**Post date:** [22 March 2024 16:34 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/12 "2024-03-22T16:34:33Z")

</div>

Got it downloaded, thanks! Now to figure it out!

---

<div class="post-metadata">

**Author:** ![badflash](https://avatars.discourse-cdn.com/v4/letter/b/d6d6ee/32.png) [@badflash](https://discourse.nodered.org/u/badflash)\
**Post date:** [22 March 2024 16:35 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/13 "2024-03-22T16:35:46Z")

</div>

No, I did not say I would use it for e-commerce, but the site has space I can put a secure page on for my own use.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [22 March 2024 16:37 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/14 "2024-03-22T16:37:28Z")

</div>

One small reminder - our responses here in the forum are given in good faith but do not represent anything legally binding! Use at your own risk. 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [21 April 2024 16:37 UTC](https://discourse.nodered.org/t/access-my-dashboard-on-my-phone/86648/15 "2024-04-21T16:37:29Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.