External access (duckdns) and security

Configuration
1

Hi to all.
I have a doubt.
I set up the access to my h.a. with duckdns like https://myaddresses:8123
Anyone, if digit this address, can insert user name and password and if guess it view my home. There is a way to improve security? I’m thinking that an hacker could access and manage my home…

2

To be fair, anyone that visits your bank’s website and guesses your username and password can have a lot of fun. That’s why we have usernames and passwords, and we make sure that we use strong passwords.

You can also ban ip addresses that get the login information wrong a defined number of times.

You can also get really advanced and use client certificates on the devices you want to use to access your setup and prevent other devices from even getting that far with a reverse proxy.

Lots of options available :slight_smile:

1 Like
3

Thanks. How can I ban ip that wrong login 5 times?

4

In your http component, use the keys ip_ban_enabled: and login_attempts_threshold:

5

Thanks bro!
It was just what I was looking for!

1 Like
6

Also take a look at two factor authentication.

Even if your username and password are leaked, they would need your 2FA device to gain access.