Duplicacy web authentication?

Hi,

Just installed Duplicacy web and configured for external access, only to realise that there’s no authentication. In other words, anyone that has the URL would be able to access and restore my backups locally. Is this really how it is? Is there no way to force UI authentication?

1 Like

Somewhat related topic Web-UI security: HTTPS, sessions, and logout button

Thanks for highlighting the link. Some good suggestions there, though the solution appears to be not to allow external (internet) access to the UI. Kind of surprised authentication is missing… hopefully it gets added at some point. Thanks again.

Can’t you set an admin password under the Settings tab?

Also, IMO it’s more secure to tunnel into the machine locally via VPN or SSH rather than expose the web interface directly over the internet.