HTTP Basic Auth

Protect your tunnels with username and password authentication.

Enable HTTP Basic Auth

Add --auth flag to require authentication for accessing your tunnel:

bash
drip http 3000 --auth <password>

Anyone accessing your tunnel URL will be prompted for credentials.

Multiple Users

Specify multiple user:password pairs (comma-separated):

bash
drip http 3000 --auth <pass1>,<pass2>

Combining with Other Options

Use HTTP auth with custom subdomain and background mode:

bash
drip http 3000 -n myapp --auth <password> -d

Combine with IP restrictions for extra security:

bash
drip http 3000 --auth <password> --allow-ip 192.168.1.0/24

How It Works

When HTTP Basic Auth is enabled:

  1. Browser displays a login prompt when accessing the tunnel URL
  2. Credentials are sent via the Authorization header
  3. Server validates credentials before forwarding the request
  4. Invalid credentials return 401 Unauthorized

Security Notes

  • Credentials are transmitted over HTTPS (encrypted)
  • Use strong passwords for production tunnels
  • Consider combining with IP restrictions for sensitive services
  • Auth is enforced at the tunnel level, not the local service

Use Cases

ScenarioCommand
Protect dev previewdrip http 3000 -n preview --auth <password>
Secure staging sitedrip http 4000 -n staging --auth <password> -d
Share with clientdrip http 3000 --auth <password>
Team accessdrip http 8080 --auth <pass1>,<pass2>

Comparison with ngrok

FeatureDripngrok
HTTP Basic AuthFree, built-inPaid plans only
Multiple usersSupportedLimited
Combined with IP rulesYesSeparate feature