In configuration.yaml I uncommented the api_password line under http. I made sure there were 2 spaces in front of api_password and replaced !secret http_password with my actual password. That should have worked, right? But even after logging out and refreshing my browser Home Assistant just logs right in without prompting for a password.
So what am I missing? Thanks.
edit: never mind, I tried using the secrets.yaml file method and it’s working now. Not sure what I was doing wrong in the configuration.yaml file.