Basic authentication

HTTP basic authentication requires a username and password before Caddy forwards a request to an application. Coolify can generate the required Caddy label and bcrypt hash for standard applications.

Use application authentication for sensitive systems

HTTP basic authentication protects a route with one shared credential. It does not replace application accounts, role-based access, multi-factor authentication, or single sign-on.

Protect a resource

Choose the path that matches how the resource is deployed.

Open the application settings

Open the application, select Configuration > General, then find HTTP Basic Authentication.

Add the credentials

Enable HTTP Basic Authentication, then enter a Username and Password. Save the application settings.

Coolify hashes the password and adds a caddy_<index>.basicauth.<username> label for each generated Caddy route.

Redeploy and verify

Redeploy the application. Open its domain in a private browser window and confirm that the browser requests the new credentials before loading the application.

Troubleshooting

On this page