# \[NEWBIE\] node-red-admin hash-pw

**URL:** <https://discourse.nodered.org/t/newbie-node-red-admin-hash-pw/9994>\
**Category:** General\
**Created:** [10 April 2019 17:20 UTC](https://discourse.nodered.org/t/newbie-node-red-admin-hash-pw/9994 "2019-04-10T17:20:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ERICX25](https://avatars.discourse-cdn.com/v4/letter/e/41988e/32.png) [@ERICX25](https://discourse.nodered.org/u/ERICX25)\
**Post date:** [10 April 2019 17:20 UTC](https://discourse.nodered.org/t/newbie-node-red-admin-hash-pw/9994/1 "2019-04-10T17:20:59Z")

</div>

Hi,  
I have just installed Node-Red on my Qnap (container station) and now I would like to secure it with a password.  
I understand ([https://nodered.org/docs/security](https://nodered.org/docs/security)) that I need to edit "settings.js"  
I found such a file in /share/CACHEDEV1\_DATA/Container/container-station-data/lib/docker/overlay2/97fdfecb5.........40ade211b/diff/usr/src/node-red/node\_modules/node-red/  
But before editing that file I need to generate the password hash  
My problem : I know almost nothing about Unix.  
Where do I type the command "npm install -g node-red-admin"  
It seems like everywhere type that command I get the message  
"-sh: npm: command not found"

Thanks for reading my question  
Eric

---

<div class="post-metadata">

**Author:** ![ukmoose](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/ukmoose/32/13_2.png) [@ukmoose](https://discourse.nodered.org/u/ukmoose)\
**Post date:** [10 April 2019 17:34 UTC](https://discourse.nodered.org/t/newbie-node-red-admin-hash-pw/9994/2 "2019-04-10T17:34:23Z")

</div>

I'd start node-red first and check that that settings.js file is the correct one (Node-RED logs which on it is using on startup)

Starting up Node-RED would also allow you to check the version of Node-RED and nodejs before you go too far 🙂

How did you install Node-RED? Did that install npm?

---

<div class="post-metadata">

**Author:** ![ERICX25](https://avatars.discourse-cdn.com/v4/letter/e/41988e/32.png) [@ERICX25](https://discourse.nodered.org/u/ERICX25)\
**Post date:** [10 April 2019 17:44 UTC](https://discourse.nodered.org/t/newbie-node-red-admin-hash-pw/9994/3 "2019-04-10T17:44:25Z")

</div>

Thanks for the tip about settings,js !  
I think I did not found the correct one  
It seems like I should find that file in a data/ directory  
[https://drive.google.com/file/d/1W9lJeJaAXVcdjUqRjEYGUcUbaB\_Vzodi/view?usp=sharing](https://drive.google.com/file/d/1W9lJeJaAXVcdjUqRjEYGUcUbaB_Vzodi/view?usp=sharing)

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [12 April 2019 15:34 UTC](https://discourse.nodered.org/t/newbie-node-red-admin-hash-pw/9994/4 "2019-04-12T15:34:44Z")

</div>

Don't forget to also configure for access via https not http (otherwise that password is passed in clear text over the network).