# Is it safe to enable Remote Tor access? (LNbits)

**URL:** <https://community.umbrel.com/t/is-it-safe-to-enable-remote-tor-access-lnbits/16056>\
**Category:** Support and Troubleshooting\
**Created:** [April 3, 2024, 10:08am UTC](https://community.umbrel.com/t/is-it-safe-to-enable-remote-tor-access-lnbits/16056 "2024-04-03T10:08:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ghoost](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/ghoost/32/4892_2.png) [@Ghoost](https://community.umbrel.com/u/Ghoost)\
**Post date:** [April 3, 2024, 10:08am UTC](https://community.umbrel.com/t/is-it-safe-to-enable-remote-tor-access-lnbits/16056/1 "2024-04-03T10:08:11Z")

</div>

Hi everyone.

I have LNbits installed on my Umbrel home and to be able to import a wallet from LNbits I need to enable access via Clear Net or via Tor. As I understand it, in order to access LNbits via Tor, I need to enable Tor remote access on my Umbrel.

Is it safe to enable this option?

Thank you for your help.

---

<div class="post-metadata">

**Author:** ![Ghoost](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/ghoost/32/4892_2.png) [@Ghoost](https://community.umbrel.com/u/Ghoost)\
**Post date:** [April 3, 2024, 10:50am UTC](https://community.umbrel.com/t/is-it-safe-to-enable-remote-tor-access-lnbits/16056/2 "2024-04-03T10:50:09Z")

</div>

I just saw in this guide : [How to configure Umbrel LNbits app without Tor](https://community.umbrel.com/t/how-to-configure-umbrel-lnbits-app-without-tor/604) that I can configure an access to LNbits through the clearnet but I can’t figure what is the best approach.  
Tor connection or clearnet access with reverse proxy.

Also, why do I need to configure a reverse proxy ? Can I just configure a port forwarding to redirect the traffic to my LNbits instance ?

Instead of

```auto
[Internet] - [Home Router/Firewall] - [Front-End Gateway] - [Umbrel]

```

I will have

```auto
[Internet] - [Home Router/Firewall] - [Umbrel]

```

**Edit : OK I found that it is better for privacy and DDOS attack protection to use a reverse proxy so that the umbrel node is never requested directly**
