{"id":5184,"date":"2025-12-13T18:15:56","date_gmt":"2025-12-13T18:15:56","guid":{"rendered":"https:\/\/nightscout.pro\/?post_type=epkb_post_type_1&p=5184"},"modified":"2025-12-13T18:18:43","modified_gmt":"2025-12-13T18:18:43","slug":"security-and-access-explained-simply","status":"publish","type":"epkb_post_type_1","link":"https:\/\/nightscout.pro\/en_us\/knowledge-base\/security-and-access-explained-simply\/","title":{"rendered":"Security and Access Explained Simply"},"content":{"rendered":"

Nightscout contains sensitive health data, so understanding how access works is important. This page explains security and access in plain English.<\/p>\n\n\n\n

You do not need technical knowledge to keep your site secure.<\/p>\n\n\n\n

\n\n\n\n

Your Nightscout URL<\/h2>\n\n\n\n

Your Nightscout URL looks like this:<\/p>\n\n\n\n

\nhttps:\/\/your-site-name.nightscoutpro.com\n<\/div><\/figure>\n\n\n\n

This is the web address people use to view your site.<\/p>\n\n\n\n

Sharing your URL<\/strong> is safe.
Sharing your API Secret<\/strong> is not.<\/p>\n\n\n\n

\n\n\n\n

What is the API Secret?<\/h2>\n\n\n\n

The API Secret is effectively the master password<\/strong> for your Nightscout site.<\/p>\n\n\n\n

It allows:<\/p>\n\n\n\n

    \n
  • Full access to your data<\/li>\n\n\n\n
  • Configuration changes<\/li>\n\n\n\n
  • Administrative actions<\/li>\n<\/ul>\n\n\n\n

    Anyone with your API Secret has full control of your site.<\/p>\n\n\n\n

    You should never share it publicly or casually.<\/p>\n\n\n\n

    \n\n\n\n

    Public vs private sites<\/h2>\n\n\n\n

    Nightscout can operate in two main modes:<\/p>\n\n\n\n

    Public site<\/h3>\n\n\n\n
      \n
    • Anyone with the URL can view your data<\/li>\n\n\n\n
    • No login is required<\/li>\n\n\n\n
    • Useful for personal use or trusted environments<\/li>\n<\/ul>\n\n\n\n

      Private site<\/h3>\n\n\n\n
        \n
      • Viewing requires authentication<\/li>\n\n\n\n
      • Recommended for most users<\/li>\n\n\n\n
      • Controlled via the Nightscout Pro settings<\/li>\n<\/ul>\n\n\n\n

        You can change this setting at any time.<\/p>\n\n\n\n

        \n\n\n\n

        Giving others access safely<\/h2>\n\n\n\n

        If caregivers, family members, or clinicians need access:<\/p>\n\n\n\n

          \n
        • Share your Nightscout URL<\/li>\n\n\n\n
        • Use Nightscout\u2019s authentication features<\/li>\n\n\n\n
        • Do not share your API Secret<\/li>\n<\/ul>\n\n\n\n

          This allows others to view your data without giving them control.<\/p>\n\n\n\n

          \n\n\n\n

          Followers and apps<\/h2>\n\n\n\n

          Follower apps and services usually require:<\/p>\n\n\n\n

            \n
          • Your Nightscout URL<\/li>\n\n\n\n
          • Sometimes a read-only token<\/li>\n<\/ul>\n\n\n\n

            They do not<\/strong> need your API Secret unless explicitly required by trusted setup instructions.<\/p>\n\n\n\n

            \n\n\n\n

            Simple security rules to remember<\/h2>\n\n\n\n
              \n
            • Share your URL freely if appropriate<\/li>\n\n\n\n
            • Keep your API Secret private<\/li>\n\n\n\n
            • Do not post screenshots showing secrets<\/li>\n\n\n\n
            • Make your site private if unsure<\/li>\n\n\n\n
            • Change your API Secret if it is ever exposed<\/li>\n<\/ul>\n\n\n\n

              Nightscout Pro handles encryption, certificates, and infrastructure security automatically.<\/p>","protected":false},"excerpt":{"rendered":"

              Nightscout contains sensitive health data, so understanding how access works is important. This page explains security and access in plain English. You do not need technical knowledge to keep your site secure. Your Nightscout URL Your Nightscout URL looks like this: This is the web address people use to view your site. Sharing your URL […]<\/p>\n","protected":false},"author":537,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"epkb_post_type_1_category":[42],"epkb_post_type_1_tag":[],"class_list":["post-5184","epkb_post_type_1","type-epkb_post_type_1","status-publish","hentry","epkb_post_type_1_category-getting-started"],"_links":{"self":[{"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/epkb_post_type_1\/5184","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/epkb_post_type_1"}],"about":[{"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/types\/epkb_post_type_1"}],"author":[{"embeddable":true,"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/users\/537"}],"replies":[{"embeddable":true,"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/comments?post=5184"}],"version-history":[{"count":1,"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/epkb_post_type_1\/5184\/revisions"}],"predecessor-version":[{"id":5185,"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/epkb_post_type_1\/5184\/revisions\/5185"}],"wp:attachment":[{"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/media?parent=5184"}],"wp:term":[{"taxonomy":"epkb_post_type_1_category","embeddable":true,"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/epkb_post_type_1_category?post=5184"},{"taxonomy":"epkb_post_type_1_tag","embeddable":true,"href":"https:\/\/nightscout.pro\/en_us\/wp-json\/wp\/v2\/epkb_post_type_1_tag?post=5184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}