# Credentials (and file names).... Not quite clear on something

**URL:** <https://discourse.nodered.org/t/credentials-and-file-names-not-quite-clear-on-something/4834>\
**Category:** General\
**Created:** [13 November 2018 11:03 UTC](https://discourse.nodered.org/t/credentials-and-file-names-not-quite-clear-on-something/4834 "2018-11-13T11:03:23Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [13 November 2018 20:32 UTC](https://discourse.nodered.org/t/credentials-and-file-names-not-quite-clear-on-something/4834/5 "2018-11-13T20:32:59Z")

</div>

Ok.. so we're switching subjects back to securing Node-RED...

I thought you had adminAuth all working? You say it's working here: [The password/security settings article mentioned on the page - #29 by Trying\_to\_learn](https://discourse.nodered.org/t/the-password-security-settings-article-mentioned-on-the-page/3707/29)

You'll note in this thread you share the node-red log with us ... so you could bookmark that thread as well to help remind you in the future.

> [@Trying\_to\_learn](#):
>
> Ok, so there are different ways of securely logging in.  
> The password option,  
> using a remote machine to act as a validater (?) to confirm it is "you" logging in.

I'm not really sure where you are getting the idea of using a remote machine to act as a validator... that isn't something I'm aware of.

> [@Trying\_to\_learn](#):
>
> Say I want to lock people out of editing the flows?

You should use `adminAuth` as discussed in the previous thread I linked to above and as documented here: [Redirecting…](https://nodered.org/docs/security.html)

---

_[View the full topic](https://discourse.nodered.org/t/credentials-and-file-names-not-quite-clear-on-something/4834)._