Hello,

Here is the way I found to add a password to Node-RED.

https://nodered.org/docs/security

https://nodered.org/docs/node-red-admin

Ctrl+C to stop the command.

Use the following command to install node-red-admin.

npm install -g node-red-admin

Now use the following command to create a password hash.

node-red-admin hash-pw

Enter your password and press Enter.

Note you will not see any * when you enter your password, so take your time!

Select the password hash and ctrl+c to copy it and paste it in a notepad for later.

Using WinSCP, go to/home/root/.node-red/folder and open setting.js

The lines 101 to 112 will look like this:

Default password: password (as you can see it is hashed)

Remove the forward slashes for the lines 105 to 112, like this:

Copy the created hash and paste it in line 109 of setting.js.

Save (it may take some time...) and reboot.

You can now login via admin user and the password you just create.

You can create many users, it is an array of users.

You can create user with "read only" rights by replacing permissions: "*" by permissions: "read".

Log out using top right icon.

Have a good day!

Best regards,

Hugo

Nice handout!

But did you implement this and try it also in image v2_4_0? I tried this but the password is not accepted when I start and want to login in Node Red. (Yes, the password is correct...).

My build:

[snip]

I can make a password via node-red-admin hash-pw but it's not accepted.

Update

Install node-red-admin (previous version:

npm install -g node-red-admin@0.1.3

See attachement build.txt (contains errors)

Unfortunately the password is not accepted.

I start node-red in debug mode (see the same attachement). Maybe the lines:

7 Aug 19:48:08 - [debug] red/runtime/nodes/credentials.load : no user key present
7 Aug 19:48:08 - [debug] red/runtime/nodes/credentials.load : using default key

is the problem.

Any suggestions?

Update 26-08-2019 **Solved**

To easy... The virusscanner on my PC blocked the call to check for the password in node-red... I did check this (same IOT2040 and same image v2.4.0) on another PC and it was working OK (this PC had no virusscanner). On my PC I made a rule in my virusscanner and it is works OK.    

Hi,

I have tried this procedure with image V2.6.0, but it is not working. Node-Red asks for the login, but it says "login failed". I have modified the setting.js file, and tried to add a new admin user as well as another one, but none of those worked.

Any hint?

Regards,

Laura