Where to start with login?

[Colin]

Read this

Safely accessing Node-RED over the Internet

Update 2025-02-19 The best advice for most people doing home automation is still: Don't expose Node-RED to the outside world! Where you really have to have some outside access, keep it as hands-off and restricted as possible. For example, using a Telegram bot. Also keep it as minimal as possible, e.g. Don't expose the Editor - EVER! If you want to provide remote control of your heating or the precious plants in your greenhouse, provide explicit controls with strong limits. Don't expose ever…

I use Cloudflare Zero Trust, and Tailscale, though the latter is a VPN based solution which may not be what you want.