# Secure WebSocket connection

**URL:** <https://discourse.nodered.org/t/secure-websocket-connection/84954>\
**Category:** General\
**Created:** [26 January 2024 21:27 UTC](https://discourse.nodered.org/t/secure-websocket-connection/84954 "2024-01-26T21:27:48Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![marcus-j-davies](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/marcus-j-davies/32/103435_2.png) [@marcus-j-davies](https://discourse.nodered.org/u/marcus-j-davies)\
**Post date:** [27 January 2024 10:20 UTC](https://discourse.nodered.org/t/secure-websocket-connection/84954/8 "2024-01-27T10:20:25Z")

</div>

> [@dcaccount](#):
>
> There is no password to access Node-RED and it is accessible via standard http.

🤯

Currently your Node RED editor can be accessed by anyone on the internet

To me it sounds as if you have 2 ports open.

**443** - fine , that is quite normal for HTTPS  
**1880** - A fully open Node RED instance (with no password)

Stop looking at this post - and block access now at the router (block access to port 1880)

And read this over : [Safely accessing Node-RED over the Internet](https://discourse.nodered.org/t/safely-accessing-node-red-over-the-internet/45024)  
And whatever you do - **DO NOT POST** your website address here

---

_[View the full topic](https://discourse.nodered.org/t/secure-websocket-connection/84954)._