# Best way to password protect uibuilder
**URL:** https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719
**Category:** General
**Tags:** uibuilder
**Created:** [14 December 2023 16:17 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719 "2023-12-14T16:17:54Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@orrinen](https://discourse.nodered.org/u/orrinen)
#### Post date: [14 December 2023 16:17 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/1 "2023-12-14T16:17:55Z")
Till now i have used cloudflared, but has its limitations.
What other good options is there to secure ui builder webpage ?
Would securing it using http node auth be good?
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [14 December 2023 18:20 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/2 "2023-12-14T18:20:37Z")
Hi. I don't personally recommend using the http nodes.
The "best" method will depend a lot on your needs of course. One way would be to use your own auth setup using a reverse proxy like NGINX.
Perhaps you could expand a little on your requirements and maybe indicate what you find limiting with Cloudflare Zero Trust?
---
### Author:  [@marcus-j-davies](https://discourse.nodered.org/u/marcus-j-davies)
#### Post date: [14 December 2023 18:22 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/3 "2023-12-14T18:22:03Z")
Voice of reason here.
Don't put it on the internet 😁
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [14 December 2023 18:25 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/4 "2023-12-14T18:25:02Z")
Though a bit like saying: "I have this car, what's the best way to stop it getting scratched? A: Don't drive it on the roads."! 🤣
The Zero Trust service (and similar tools) are like seat belts (and lights, brakes, crumple zones and passing your driving test) for cars. 🙃
---
### Author:  [@orrinen](https://discourse.nodered.org/u/orrinen)
#### Post date: [14 December 2023 21:13 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/5 "2023-12-14T21:13:47Z")
> [@TotallyInformation](#):
>
> Perhaps you could expand a little on your requirements
What i need is just basic password protection. No more than that required. I belive enabling httpnode auth in settings.js would be sufficient. I think NGINX is not necessary, as it provides alot i dont need.
---
### Author:  [@bakman2](https://discourse.nodered.org/u/bakman2)
#### Post date: [15 December 2023 04:57 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/6 "2023-12-15T04:57:56Z")
> [@orrinen](#):
>
> as it provides alot i dont need.
"You think you don't need" - the point of nginx together with ssl and some other form of authentication/authorization is to actually secure it. node-red directly to the internet with just basic auth on http-in is **not** secure - do **not** do this.
nginx is not easy, but there are "helpers" available like [npm](https://nginxproxymanager.com) (nginx proxy manager) that can help with the security/certificate setup and lets you easily manage all kinds of endpoints.
---
### Author:  [@orrinen](https://discourse.nodered.org/u/orrinen)
#### Post date: [15 December 2023 19:30 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/7 "2023-12-15T19:30:46Z")
I already have ssl/tls encryption through cloudflare tunnel. If enabling http node auth in settings.js is good enough as password protection than i make use of that.
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [16 December 2023 00:01 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/8 "2023-12-16T00:01:58Z")
> [@orrinen](#):
>
> I already have ssl/tls encryption through cloudflare tunnel
So isn't the 50 free user accounts available with CF ZT enough for you?
---
### Author:  [@orrinen](https://discourse.nodered.org/u/orrinen)
#### Post date: [16 December 2023 03:17 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/9 "2023-12-16T03:17:17Z")
For now it is. But for the future if i would need more than 50, then authentication with node-red would be my next option. (Enable httpnodeAuth)
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [16 December 2023 13:36 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/10 "2023-12-16T13:36:17Z")
OK, fair enough. I've never really done anything serious with that option so I'd welcome any feedback or instructions you can share when you get to it, I can then share them in the docs.
---
### Author:  [@system](https://discourse.nodered.org/u/system)
#### Post date: [14 February 2024 13:37 UTC](https://discourse.nodered.org/t/best-way-to-password-protect-uibuilder/83719/11 "2024-02-14T13:37:05Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.