# NodeRed Update V2\>3: Password protection removed

**URL:** <https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590>\
**Category:** General\
**Created:** [25 July 2022 16:07 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590 "2022-07-25T16:07:10Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![dsporer](https://avatars.discourse-cdn.com/v4/letter/d/6de8d8/32.png) [@dsporer](https://discourse.nodered.org/u/dsporer)\
**Post date:** [25 July 2022 16:07 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/1 "2022-07-25T16:07:10Z")

</div>

Does anyone know the background? Is this to be expected with every update via the script?

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [25 July 2022 16:10 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/2 "2022-07-25T16:10:34Z")

</div>

Hi @dsporer

Can you provide some more context here? By 'the script', I'm guessing you are referring to the update script provided for the Pi?

Can you describe what steps you took to run the script and what the result was?

The script doesn't touch your settings file if it already exists - which is the only way any `adminAuth` settings can be modified.

---

<div class="post-metadata">

**Author:** ![dsporer](https://avatars.discourse-cdn.com/v4/letter/d/6de8d8/32.png) [@dsporer](https://discourse.nodered.org/u/dsporer)\
**Post date:** [25 July 2022 16:12 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/3 "2022-07-25T16:12:52Z")

</div>

I just started the update script. The previously set up password protection was removed afterwards.

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [25 July 2022 16:16 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/4 "2022-07-25T16:16:25Z")

</div>

Did you take a backup of your settings file? Can you compare it with what you have now to confirm it has been changed?

This is definitely _not_ the expected behaviour.

---

<div class="post-metadata">

**Author:** ![dsporer](https://avatars.discourse-cdn.com/v4/letter/d/6de8d8/32.png) [@dsporer](https://discourse.nodered.org/u/dsporer)\
**Post date:** [25 July 2022 16:19 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/5 "2022-07-25T16:19:50Z")

</div>

Unfortunately, I don't have a backup and will have to set up the password protection again. All other data was preserved. Thank you for the info - maybe other users will report the same observation and be able to help with this bug more qualified than I can.

Yes, via update script provided for Pi.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [25 July 2022 20:22 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/6 "2022-07-25T20:22:06Z")

</div>

Always take a backup before updates, especially major ones.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [26 July 2022 05:57 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/7 "2022-07-26T05:57:50Z")

</div>

> [@dsporer](#):
>
> I don't have a backup

What will you do if the SD card dies?

---

<div class="post-metadata">

**Author:** ![dsporer](https://avatars.discourse-cdn.com/v4/letter/d/6de8d8/32.png) [@dsporer](https://discourse.nodered.org/u/dsporer)\
**Post date:** [26 July 2022 15:27 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/8 "2022-07-26T15:27:37Z")

</div>

Luckily, my Raspi is not yet in any important productive use. There is no SD card in this model (CM4) either. Actually, I didn't want to discuss (useful) backups here...

---

<div class="post-metadata">

**Author:** ![HaroldPetersInskipp](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/haroldpetersinskipp/32/42319_2.png) [@HaroldPetersInskipp](https://discourse.nodered.org/u/HaroldPetersInskipp)\
**Post date:** [26 July 2022 15:34 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/9 "2022-07-26T15:34:30Z")

</div>

I'm assuming you already manually edited the `settings.js` file after this problem updating? But on the off chance that you haven't, are you able to verify the last modified date of the `settings.js` file corresponds to when you ran the update script?

If you don't know when you ran the script, you can check your command history on a Pi with the `history` command.

---

<div class="post-metadata">

**Author:** ![HaroldPetersInskipp](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/haroldpetersinskipp/32/42319_2.png) [@HaroldPetersInskipp](https://discourse.nodered.org/u/HaroldPetersInskipp)\
**Post date:** [26 July 2022 15:39 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/10 "2022-07-26T15:39:07Z")

</div>

Also are you sure that you are running the same install (locally installed vs global install)?

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [26 July 2022 19:21 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/11 "2022-07-26T19:21:21Z")

</div>

> [@dsporer](#):
>
> Actually, I didn't want to discuss (useful) backups here...

🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [24 September 2022 19:21 UTC](https://discourse.nodered.org/t/nodered-update-v2-3-password-protection-removed/65590/12 "2022-09-24T19:21:32Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.