# Require login form to access Kibana dashboard

**URL:** <https://discuss.elastic.co/t/require-login-form-to-access-kibana-dashboard/139640>\
**Category:** Kibana\
**Created:** [July 11, 2018, 7:57pm UTC](https://discuss.elastic.co/t/require-login-form-to-access-kibana-dashboard/139640 "2018-07-11T19:57:05Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![drew](https://avatars.discourse-cdn.com/v4/letter/d/b19c9b/32.png) [@drew](https://discuss.elastic.co/u/drew)\
**Post date:** [July 11, 2018, 7:57pm UTC](https://discuss.elastic.co/t/require-login-form-to-access-kibana-dashboard/139640/1 "2018-07-11T19:57:05Z")

</div>

How do I require a login with a username and password to access Kibana dashboards? Right now if I run Kibana, I am able to get to the dashboards without any sort of login. I have followed all the steps outlined in the user authentication how-to at [https://www.elastic.co/guide/en/x-pack/5.6/setting-up-authentication.html](https://www.elastic.co/guide/en/x-pack/5.6/setting-up-authentication.html), but all that seems to do is prevent Kibana from accessing elasticsearch without a password.

---

<div class="post-metadata">

**Author:** ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Post date:** [July 12, 2018, 3:43am UTC](https://discuss.elastic.co/t/require-login-form-to-access-kibana-dashboard/139640/2 "2018-07-12T03:43:53Z")

</div>

Are you using Kibana/ES version 5.6?

There is a default password is `changeme`. You will need to update your `kibana.yml` to reflect this:

```auto
elasticsearch.username: kibana
elasticsearch.password: changeme

```

You can then either change the password via Kibana, or via the API in the docs you linked to.

---

<div class="post-metadata">

**Author:** ![drew](https://avatars.discourse-cdn.com/v4/letter/d/b19c9b/32.png) [@drew](https://discuss.elastic.co/u/drew)\
**Post date:** [July 12, 2018, 4:51pm UTC](https://discuss.elastic.co/t/require-login-form-to-access-kibana-dashboard/139640/3 "2018-07-12T16:51:10Z")

</div>

I have changed the default password, but the problem is that there is no login page. If I go to localhost:5601 it immediately takes me to the dashboard without needing to authenticate

---

<div class="post-metadata">

**Author:** ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Post date:** [July 12, 2018, 5:28pm UTC](https://discuss.elastic.co/t/require-login-form-to-access-kibana-dashboard/139640/4 "2018-07-12T17:28:20Z")

</div>

Can you please verify if you are using Kibana/ES version 5.6?

Is it possible your session is already authenticated? Can you provide your `kibana.yml` file?

---

<div class="post-metadata">

**Author:** ![drew](https://avatars.discourse-cdn.com/v4/letter/d/b19c9b/32.png) [@drew](https://discuss.elastic.co/u/drew)\
**Post date:** [July 12, 2018, 5:37pm UTC](https://discuss.elastic.co/t/require-login-form-to-access-kibana-dashboard/139640/5 "2018-07-12T17:37:37Z")

</div>

Yes I am using version 5.6. This is my kibana.yml

```
    elasticsearch.url: "http://localhost:9200"
    xpack.security.enabled: true
    elsaticsearch.password: "elasticpassword"
    xpack.security.authc.accept_default_password: false
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 9, 2018, 5:37pm UTC](https://discuss.elastic.co/t/require-login-form-to-access-kibana-dashboard/139640/6 "2018-08-09T17:37:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.