How secure Node-RED

kutilak · January 8, 2018, 3:04pm

Hi, please, how secure Node-RED ? I need set password to changing block in UI but for guests is readable

hub.martin · January 8, 2018, 6:53pm

Hello kutilak,

you have to set the username and password in the /home/pi/.node-red/settings.js file.
Please see the documentation https://nodered.org/docs/security#usernamepassword-based-authentication
You need to uncomment the adminAuth block.

The password in the setting.js file is hashed, you need to use node-red-admin tool according to the documentation above. Install the tool to your Raspberry Pi by typing:

sudo npm install -g node-red-admin
(https://www.npmjs.com/package/node-red-admin)

Then run the tool:

pi@hub:~$ node-red-admin hash-pw
Password:
$2a$08$sPLAKM3wauJI0QN1EusJieMMBNWc0MKYvZpFygEaqYY8oTZz8pePe
pi@hub:~$

Let us know if you have succeeded.

mlnz · November 13, 2018, 10:56am

Hello Martin,
I tried it using your instructions and it works! I just have some errors with permissions during installation node-red-admin, but password generator works.

Thanks!