# Disable web gui and use only apps

**URL:** <https://vaultwarden.discourse.group/t/disable-web-gui-and-use-only-apps/2308>\
**Category:** Help\
**Created:** [January 31, 2023, 7:50pm UTC](https://vaultwarden.discourse.group/t/disable-web-gui-and-use-only-apps/2308 "2023-01-31T19:50:47Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![CyberWarden](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/cyberwarden/32/980_2.png) [@CyberWarden](https://vaultwarden.discourse.group/u/CyberWarden)\
**Post date:** [February 11, 2023, 10:00am UTC](https://vaultwarden.discourse.group/t/disable-web-gui-and-use-only-apps/2308/6 "2023-02-11T10:00:53Z")

</div>

Please elaborate why do you want to turn off webvault. I guess you want to secure it that way, but turning web vault off is not a security measure. You vaultwarden is still accessible on the same port trough the internet. You will just see 404: Not Found in a browser when you try to visit your web vault. Nonetheless your Vaultwarden is still there. How else could you connect from you iOS if there will be not any? Turning off just a web page IS NOT a security measure. However consider solutions below:

1. Whitelist on firewall or reverse proxy to allow only trusted IPs, example only from your own country.

2. Deploy Wireguard VPN and access Vaultwarden from internal network only.

3. Configure Fail2Ban to prevent access from anyone after X failed login attempts from his IP address.

4. Use Knock.d - [https://linux.die.net/man/1/knockd](https://linux.die.net/man/1/knockd) - you can keep all your ports closed, but knock.d will add dynamically a firewall rule to allow the connection after receiving proper combination of packets you define. It is really an aweosome tool. It allows to access any services only on demand securely.

5. Configure 2FA for all accounts

6. Dissallow sign ups

Please also check and read my comment in this post:

> [@How to configure reverse proxy + Basic Auth with Vaultwarden](https://vaultwarden.discourse.group/t/how-to-configure-reverse-proxy-basic-auth-with-vaultwarden/2271/5):
>
> You might find Authelia useful to you. Authelia is an open-source authentication and authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing multi-factor authentication and single sign-on (SSO) for your applications via a web portal. [image] However there are plenty of easier best practices at all layers of deployment. Firewall - always allow only what is necessary. Block all traffic OUT and IN, then add rules to allow onl…

---

_[View the full topic](https://vaultwarden.discourse.group/t/disable-web-gui-and-use-only-apps/2308)._
