Wled: Full UI password protection

Created on 29 Oct 2019 · 6Comments · Source: Aircoookie/WLED

v0.8.6
I know it's a hassle, I read the notes in the docs about security, but can we please get a password to access the UI ?

Every device on my network has a password, except this. The fact that it cannot be re-flashed without a password is great, but i'd like the whole UI password protected.

My biggest threat is from within my network - teenage kids! They bring round their friends with their laptops to do homework etc.. If one of them scans for IP addresses, and then messes with my settings, i'm gonna be really mad.

I can't ban all my kids' friends, so my best defence is to ensure all my devices are secure.

enhancement

Source

jj-uk

👍2

Most helpful comment

I will consider this! AFAIK the ESPAsyncWebserver already has an option for password protecting pages. It would be too much of a hassle to always enter the PW for me personally, but having the option to do so (like in your case, where you can't be sure there are no unauthorized users on the network) can't hurt.

Aircoookie on 30 Oct 2019

👍2

All 6 comments

Aircoookie on 30 Oct 2019

👍2

Thanks. My browser will take care of entering the password each time.

jj-uk on 30 Oct 2019

👍1

Good option and should be add

pepeEL on 28 Dec 2019

I live at home with partners
Our router is unable to set up a VLAN and block access so that anyone in the home or guests receiving WIFI access can control the LED lights in the room

rant989 on 15 Mar 2020

@Aircoookie I know previously you mentioned API keys, which might be a nice way to allow programmatic access (Home Assistant) while still locking down the UI.
Maybe an IP whitelist could be a good interim solution? Only allow access from specific IP addresses, but don't worry about adding a password to the UI.