# Is there a way to disable password auth when using upstream 2FA?
**URL:** https://discourse.nodered.org/t/is-there-a-way-to-disable-password-auth-when-using-upstream-2fa/47087
**Category:** General
**Created:** [13 June 2021 00:57 UTC](https://discourse.nodered.org/t/is-there-a-way-to-disable-password-auth-when-using-upstream-2fa/47087 "2021-06-13T00:57:37Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@poldim](https://discourse.nodered.org/u/poldim)
#### Post date: [13 June 2021 00:57 UTC](https://discourse.nodered.org/t/is-there-a-way-to-disable-password-auth-when-using-upstream-2fa/47087/1 "2021-06-13T00:57:37Z")
Looking at the docs, I don't see an obvious way to disable the login requirements. Is this an option?
I'm using a combination of reverse proxy and 2FA authentication through Authelia and Duo. As it's configured now, I have to log in to Authelia with username and password, then prompted for 2FA through Duo, and then I'm presented with the standard login for Node-Red. Ideally, I could disable the auth for Node-Red since the security is being handled upstream.
The guide I used for getting setup: [Setting Up Authelia With SWAG](https://blog.linuxserver.io/2020/08/26/setting-up-authelia/)
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [13 June 2021 09:05 UTC](https://discourse.nodered.org/t/is-there-a-way-to-disable-password-auth-when-using-upstream-2fa/47087/2 "2021-06-13T09:05:02Z")
Just disable the Node-RED auth. Make sure that then, the only access to Node-RED is via the proxy. That is done by removing any local desktop and configuring a local device firewall to only allow inbound traffic on the Node-RED port (1880 if you've not changed it). Keep TLS turned on unless you are very sure of the security of your local network (actually it is best practice to leave it turned on anyway).
---
### Author:  [@poldim](https://discourse.nodered.org/u/poldim)
#### Post date: [17 June 2021 14:30 UTC](https://discourse.nodered.org/t/is-there-a-way-to-disable-password-auth-when-using-upstream-2fa/47087/3 "2021-06-17T14:30:29Z")
Thanks, it was as easy as commenting out my admin auths to disable login. Now I have a nice and easy login flow after 2FA authorization!
---
### Author:  [@system](https://discourse.nodered.org/u/system)
#### Post date: [1 July 2021 14:30 UTC](https://discourse.nodered.org/t/is-there-a-way-to-disable-password-auth-when-using-upstream-2fa/47087/4 "2021-07-01T14:30:57Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.