Page 1 of 1
WebUI, login credentials
Posted: Tue Apr 09, 2024 4:47 pm
by Arelius
Hi all,
Is it possible to go around the WebUI login page by using any of these?
- WEBUI_USERNAME=
- WEBUI_PASSWORD=
- QBITTORRENT_WEBUI_USERNAME=
- QBITTORRENT_WEBUI_PASSWORD=
Re: WebUI, login credentials
Posted: Wed Apr 10, 2024 10:02 am
by Peter
- Could you clarify what do you mean by "go around"?
- Also, each Docker qBittorrent "distribution" is different, there is no official version. So each will differ in behavior.
Re: WebUI, login credentials
Posted: Wed Apr 10, 2024 1:51 pm
by Arelius
Peter wrote: Wed Apr 10, 2024 10:02 am
- Could you clarify what do you mean by "go around"?
- Also, each Docker qBittorrent "distribution" is different, there is no official version. So each will differ in behavior.
I don't want to get asked for user/pass is what I mean.
I have not seen any builds with these commands (not that I remember at least) so I tried adding them to Docker compose but none of them worked so I though maybe it's just not possible(?).
Is there any build out there that supports such behavior?
Re: WebUI, login credentials
Posted: Wed Apr 10, 2024 1:56 pm
by Peter
It would be a BIG security flaw.
Simply go into settings and you can enable whitelist. Like you can whitelist an IP for example. If it's on the internet and you don't have a static IP, you can always set up SSH port forward and then use the local IP (like 127.0.0.1) as whitelist.
Re: WebUI, login credentials
Posted: Wed Apr 10, 2024 5:13 pm
by Arelius
Peter wrote: Wed Apr 10, 2024 1:56 pm
It would be a BIG security flaw.
Simply go into settings and you can enable whitelist. Like you can whitelist an IP for example. If it's on the internet and you don't have a static IP, you can always set up SSH port forward and then use the local IP (like 127.0.0.1) as whitelist.
Under which tab can I find that setting? Maybe I'm blind

Re: WebUI, login credentials
Posted: Tue Sep 24, 2024 2:14 am
by ticedoff8
After you log into the Web UI, click on Tools > Options > Web UI
On that tab, the 2nd group is labeled "Authentication".
In that group, there is a tic-box for "Bypass authentication for clients in the whitelisted IP subnets" - check that box and add your local subnet using the example already ghosted in the list box (EG: 172.17.32.0/24).
Save it.
You can add multiple subnets and they are comma-separated