# How can I turn on https? **URL:** \ **Category:** General Discussion\ **Created:** [May 6, 2022, 6:15am UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561 "2022-05-06T06:15:06Z")\ **Posts on this page:** 12\ **Page:** 2
**Author:** ![smolgrrr](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/smolgrrr/32/2825_2.png) [@smolgrrr](https://community.umbrel.com/u/smolgrrr)\ **Post date:** [June 13, 2024, 12:36pm UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/22 "2024-06-13T12:36:07Z")
FYI for everyone is this thread. We now have [Cloudflare](https://apps.umbrel.com/app/cloudflared) in the app-store which allows you to make apps accessible behind a public domain. ---
**Author:** ![Berserker](https://avatars.discourse-cdn.com/v4/letter/b/ba8739/32.png) [@Berserker](https://community.umbrel.com/u/Berserker)\ **Post date:** [June 13, 2024, 2:31pm UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/23 "2024-06-13T14:31:26Z")
True, but for some apps are still needed https locally, even Cloudflare doing the tunneling. ---
**Author:** ![doingbobthings](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/doingbobthings/32/5555_2.png) [@doingbobthings](https://community.umbrel.com/u/doingbobthings)\ **Post date:** [June 13, 2024, 6:52pm UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/24 "2024-06-13T18:52:40Z")
Doesn’t the Cloudflare platform require a user account? If so, I’d prefer something more anonymous. ---
**Author:** ![AirHache](https://avatars.discourse-cdn.com/v4/letter/a/8dc957/32.png) [@AirHache](https://community.umbrel.com/u/AirHache)\ **Post date:** [August 6, 2024, 8:18pm UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/25 "2024-08-06T20:18:09Z")
Hello, Seconding the request about https. Is it planned in the roadmap? ---
**Author:** ![Pinipon88](https://avatars.discourse-cdn.com/v4/letter/p/db5fbb/32.png) [@Pinipon88](https://community.umbrel.com/u/Pinipon88)\ **Post date:** [August 15, 2024, 7:00am UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/26 "2024-08-15T07:00:59Z")
Unvelievable this is not yet a reality (and how this is not priority at all), sure it’s one of the reasons why some people migrate to Citadel ---
**Author:** ![jpl\_btc](https://avatars.discourse-cdn.com/v4/letter/j/b3f665/32.png) [@jpl\_btc](https://community.umbrel.com/u/jpl_btc)\ **Post date:** [August 18, 2024, 1:55am UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/27 "2024-08-18T01:55:16Z")
I need HTTPS locally to make my btcpayserver work with cloudflare. why would you let us install apps that require local https, but then we cannot use. makes no sense ---
**Author:** ![pcwitch](https://avatars.discourse-cdn.com/v4/letter/p/a6a055/32.png) [@pcwitch](https://community.umbrel.com/u/pcwitch)\ **Post date:** [August 26, 2024, 1:40am UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/28 "2024-08-26T01:40:18Z")
> [@jpl\_btc](#): > > I need HTTPS locally to make my btcpayserver work with cloudflare. No, you don’t. When you create the tunnel on Cloudflare, you have the option of making a http connection to localhost and port. BTCpayserver will accept this encrypted tunnel from Cloudflare and you’ll get access to the full functionality. Your connection will be a https connection from your browser to your umbrel. The only unencrypted connection is between the Cloudflare service and the btcpayserver service, which only happens, and is contained to the localhost. ---
**Author:** ![silas](https://avatars.discourse-cdn.com/v4/letter/s/839c29/32.png) [@silas](https://community.umbrel.com/u/silas)\ **Post date:** [September 2, 2024, 7:52pm UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/29 "2024-09-02T19:52:04Z")
**ntfy** can’t show desktop notifications because the web [Notifications API](https://developer.mozilla.org/en-US/docs/Web/API/Notification) requires HTTPS ---
**Author:** ![sahilph](https://avatars.discourse-cdn.com/v4/letter/s/ba9def/32.png) [@sahilph](https://community.umbrel.com/u/sahilph)\ **Post date:** [October 7, 2024, 1:48am UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/30 "2024-10-07T01:48:54Z")
I have created a app which would run Umbrel in https using self signed certificates. Check out [this discussion](https://community.umbrel.com/t/new-app-umbrel-httpsizer/19434) ---
**Author:** ![Dionisius](https://avatars.discourse-cdn.com/v4/letter/d/53a042/32.png) [@Dionisius](https://community.umbrel.com/u/Dionisius)\ **Post date:** [December 5, 2024, 3:38pm UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/31 "2024-12-05T15:38:03Z")
You can always do it with an alias or an email not associated with your identity. ---
**Author:** ![cabeoc](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/cabeoc/32/3047_2.png) [@cabeoc](https://community.umbrel.com/u/cabeoc)\ **Post date:** [December 5, 2024, 8:49pm UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/32 "2024-12-05T20:49:59Z")
This is an interesting discussion. > [@techengineer21](#): > > running http accross Tor does not fully secure the connection People apparently don’t know how TOR works. If you’ve ever noticed, _all_ .onion sites _never_ use HTTPS. They only use HTTP. This is because they don’t need to use SSL and instead use TOR’s own encryption, and owners of .onion sites do not want to register a certificate, because going out and registering an SSL certificate with a Certificate Authority (CA) organization is the opposite of being anonymous when it comes to hosting your hidden service. That’s not up to Umbrel; it’s just how TOR works. Go browse the dark web sometime. Here’s a Reddit thread on the subject. [https://www.reddit.com/r/TOR/comments/v4mtid](https://www.reddit.com/r/TOR/comments/v4mtid) When it comes to HTTPS on your local network, it really would be nice to have the option of setting up an SSL certificate and enable HTTPS for Umbrel apps, as people have expressed here and other places. However, I can see why it wouldn’t be enabled by default. Just like your local router or printer, going to a webpage on your LAN with HTTPS would have your browser give you a warning stating it doesn’t have a certificate it recognizes (which you can skip), which your browser does for every site whose certificate hasn’t been registered with a CA, something you don’t do for non-public sites on your LAN. > [@techengineer21](#): > > If a host on LAN is compromised, they will own your umbrel quick without https Pretty sure this would be the case with or without HTTPS, if your Umbrel were vulnerable. HTTPS isn’t a firewall. It just encrypts your traffic between computers. Regardless, the option would be nice since it’s such as highly requested feature. Has there ever been a statement from the Umbrel team as to why they’ve opted to not add this as a feature by now? ---
**Author:** ![roberto188](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@roberto188](https://community.umbrel.com/u/roberto188)\ **Post date:** [January 18, 2025, 5:43am UTC](https://community.umbrel.com/t/how-can-i-turn-on-https/7561/33 "2025-01-18T05:43:34Z")
This is not true. Simply doesn’t work. Still throws a http error. [Previous page](https://community.umbrel.com/t/how-can-i-turn-on-https/7561.md?page=1)