# Security - The Best Way

**URL:** <https://discourse.nodered.org/t/security-the-best-way/76326>\
**Category:** General\
**Created:** [9 March 2023 00:14 UTC](https://discourse.nodered.org/t/security-the-best-way/76326 "2023-03-09T00:14:38Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [9 March 2023 02:31 UTC](https://discourse.nodered.org/t/security-the-best-way/76326/2 "2023-03-09T02:31:59Z")

</div>

> [@edilsonlucas](#):
>
> When using it, I'm theoretically opening a port to the internet when I need to use the telegram feature or to download repositories, so I end up having this vulnerability?

Depends on how you use Telegram. There are 2 ways and the simples creates a connection from Node-RED to Telegram which is significantly less risky than creating an inbound connection.

> [@edilsonlucas](#):
>
> What would be the best practices to protect my application and my server

Please have a look at this FAQ post for advice on how to safely access node-red over the internet.

> [@Safely accessing Node-RED over the Internet](https://discourse.nodered.org/t/safely-accessing-node-red-over-the-internet/45024):
>
> Update 2025-02-19 The best advice for most people doing home automation is still: Don't expose Node-RED to the outside world! Where you really have to have some outside access, keep it as hands-off and restricted as possible. For example, using a Telegram bot. Also keep it as minimal as possible, e.g. Don't expose the Editor - EVER! If you want to provide remote control of your heating or the precious plants in your greenhouse, provide explicit controls with strong limits. Don't expose ever…

---

_[View the full topic](https://discourse.nodered.org/t/security-the-best-way/76326)._