#Make openclaw dashboard accessible from all device

1 messages · Page 1 of 1 (latest)

spice sail
#

Right now i can only access the openclaw dashboard from my pc im running it on.
Can can i access from other devices on the same network?

fervent etherBOT
#

To help others find answers, you can mark your question as solved via Right click solution message -> Apps -> ✅ Mark Solution

hearty gardenBOT
native depotBOT
#

Yep, but for the dashboard I’d recommend Tailscale Serve over raw LAN access.

Best option

  • keep gateway.bind: "loopback"
  • run openclaw gateway --tailscale serve
  • open https://<magicdns>/ from your other device

If you want LAN-only access

  • set gateway.bind: "lan" (not 0.0.0.0)
  • keep gateway auth enabled (token or password)
  • set gateway.controlUi.allowedOrigins to the exact origin you’ll open, for example:
{
  gateway: {
    bind: "lan",
    auth: { mode: "token", token: "replace-me" },
#
    controlUi: {
      allowedOrigins: ["http://192.168.1.50:18789"],
    },
  },
}
  • then open http://192.168.1.50:18789/

Gotchas

  • new browser/device needs one-time approval: openclaw devices list then openclaw devices approve <requestId>
  • plain LAN HTTP is a non-secure browser context, so dashboard access from another device can hit device-auth/security issues. HTTPS via Tailscale or a reverse proxy is the cleaner fix.

Docs:

#

Paste openclaw --version and whether you installed via Docker or native, and I can give you the exact commands.

spice sail
#

Why is it giving this error when trying to log in:
control ui requires device identity (use HTTPS or localhost secure context)

native depotBOT
#

That error usually means you’re opening the dashboard over plain LAN HTTP, like http://192.168.x.x:18789/.

Why it happens:

  • the browser treats that as a non-secure context
  • OpenClaw’s Control UI needs device identity
  • device identity needs HTTPS or localhost

So:

  • http://127.0.0.1:18789/ works locally
  • http://<lan-ip>:18789/ from another device hits that error

Fixes

  1. Best: use Tailscale Serve
    openclaw gateway --tailscale serve
    then open https://<magicdns>/

  2. Or: put OpenClaw behind an HTTPS reverse proxy