Security

SECURITY.md

Security

Authentication

FRP Tunnel uses token-based authentication. Tokens are generated with ft token using secrets.token_hex(16).

Best Practices

Change the default dashboard password (admin/admin) in frps.yaml
Restrict firewall rules to specific IP ranges when possible
Use SSH key authentication instead of passwords
Keep FRP binaries updated

Reporting Vulnerabilities

Please report security issues via GitHub Issues with the "security" label.

There aren't any published security advisories