Hi team,
I’m currently running n8n version 1.85.1 on Kubernetes. I’ve noticed that when creating a new webhook, the default authentication is set to None.
Is there a way to configure a default authentication method for all new webhooks?
The goal is to prevent unintentionally exposing webhooks without any authentication when none is manually set.
Thanks in advance!
1 Like
Hey @skull99 welcome to the community!
Hi, I believe that’s why there are two options: “Test URL” and “Production URL”
You also need to toggle the workflow to Active , which adds another layer of protection against unintentional behavior.
That said, this does seem like a feature request…
Feel free to open Feature Requests
skull99:
Hi team,
I’m currently running n8n version 1.85.1 on Kubernetes. I’ve noticed that when creating a new webhook, the default authentication is set to None.
Is there a way to configure a default authentication method for all new webhooks?
The goal is to prevent unintentionally exposing webhooks without any authentication when none is manually set.
Thanks in advance!
Hey, On the webhook node, you select what auth you want that webhook to have, by default it’s is none, but I don’t think there is a method to change this atm.
Hey,
Thinking further into this one, I did find a method to secure the endpoint for webhook, it’s via creating an application and setting auth token only via cloudflare, so no one can access from outside without the clientid / secret
Hey everyone,
I wanted to share how I’ve locked down my self-hosted n8n instance using Cloudflare Tunnel and Zero Trust access control. This setup is what many enterprise companies use, but it’s totally achievable even for solo devs or small teams. And yes — it’s free for most use cases.
My instance, if you visit, you’ll see a Cloudflare Access login screen first — that’s not just for show. It’s part of a much stronger security model.
[Screenshot at 16.59.26]
n8n can connect to databases, …
Check it out a bit further, am adding the webhook part in soon, so any questions let me know. @skull99