Disable webaccess to emby server?

[dcook 303]

Hi, I am wondering if there is an easy way to disable access to the HTML interface of Emby?

I know in my user settings under the access tab I can uncheck all and then select the specific devices I want allowed, but I don't want to have to manage that.

I would rather allow all devices, but disable direct HTML browser access.

 

 

[Luke 42176]

HI, not generically, no. Only via device access.

[dcook 303]

@Lukeso if my users are using apps (tablets, firetv, etc) there is no way to disable or lock down the HTML interface of the Emby Server?
I know I can block the 8096 port but I assume that will break the apps as well?

Is it possible to move the HTML dashboard to a different port and keep 8096 only for the apps that are connecting?

Traditionally my family has all been inside the LAN access, but now some of them are going off to school and not living at home, I still want them to be able to access using their apps, but I don't want to expose the HTML dashboard to the Internet!

Edited Thursday at 07:13 PM by dcook

[Luke 42176]

Right shirt there is no way to do this universally.

 Blocking via device access will work but it requires some manual effort.

[dcook 303]

58 minutes ago, Luke said:

Right shirt there is no way to do this universally.

 Blocking via device access will work but it requires some manual effort.

Do you know if is on the roadmap in the near future?

To me it seems like common sense to have the HTML dashboard access separate from the user app access

If its not on the roadmap, how about a simple switch under the Network Settings:

Disable HTML access to all non admin users (Yes/No)

Edited Thursday at 08:38 PM by dcook

[yocker 1362]

22 minutes ago, dcook said:

Do you know if is on the roadmap in the near future?

To me it seems like common sense to have the HTML dashboard access separate from the user app access

If its not on the roadmap, how about a simple switch under the Network Settings:

Disable HTML access to all non admins (Yes/No)

You might be able to do it via reverse proxy filtering some how.
Bet some one in here will know.

[pwhodges 2023]

On 12/03/2026 at 19:12, dcook said:

I still want them to be able to access using their apps, but I don't want to expose the HTML dashboard to the Internet!

The apps use HTML too.  The dashboard is simply a different page (and is also accessible through the apps).

What are you afraid of?  If your users are not admins is that not sufficient for you?

Paul

[dcook 303]

On 14/03/2026 at 19:04, pwhodges said:

The apps use HTML too.  The dashboard is simply a different page (and is also accessible through the apps).

What are you afraid of?  If your users are not admins is that not sufficient for you?

Paul

I just don't see why I need to expose a HTML webpage to the internet, especially one that has admin dashboard functions.

If 8096 is used by the apps, then it would have been smarter to have the HTML interface and admin dashboard on its own separate port

Right now it seems like its ALL or None, I either expose everything or nothing

Another alternative would be to have a simple on/off flag so you can disable HTML access for users, and restrict them to only use the APPs
 

Edited 2 hours ago by dcook

[ebr 16305]

Hi.  HTML is just a presentation layer.  Our API is agnostic to the presentation.

I'm not really sure how we would block or how you even really distiguish "web access" when everything is just through the API.  Some of our "apps" use HTML in their presentation.