Privacy & Security

Secure the Duplicacy Web Interface

The management UI should normally remain local and protected by a strong administration password.

Quick answer:

The management UI should normally remain local and protected by a strong administration password.

Steps for Windows

  1. Leave the listening address on localhost unless remote access is strictly necessary.
  2. Set an administration password using Settings.
  3. Restrict Windows Firewall access and avoid public port forwarding.
  4. Open the dashboard locally and confirm the password requirement works.

How to verify the result

The UI is accessible from the intended device and not openly accessible on the network.

Important limitation

Never expose the management UI directly to the internet without a considered access design.

Why this matters

The practical goal is a recoverable Duplicacy revision, not just a successful-looking progress indicator. Keep your source, backup destination, Backup ID and necessary credentials documented. If this workflow changes your retention or storage configuration, verify a restore before applying it to important data.

Frequently asked questions

How do I secure the web interface?
The management UI should normally remain local and protected by a strong administration password.
How can I confirm this worked?
The UI is accessible from the intended device and not openly accessible on the network.
What should I avoid?
Never expose the management UI directly to the internet without a considered access design.

Primary documentation: Duplicacy Web Edition User Guide · Developer download · Last source review: November 2, 2026. This is an independent editorial checklist, not a claim of hands-on testing.

Set up your Windows backup

Choose the right edition, verify the installer, then test a restore.

Read download guide →