Explanation
Check what you are exposing before you share
Know who can reach your app and what is recorded before you open a tunnel.
- Applies to
- All plans
- Time
- About 3 minutes to read
- What it changes
- None. This page explains; it changes nothing.
- Last reviewed
- , by Product documentation
What to know before you start
- Anything you share can be opened by anyone who has the address, unless you protect the tunnel.
What an address does not protect
Before you share
- Is the app showing real data, accounts or secrets? Use test data.
- Who needs to reach it, and for how long? Set an expiry and a password or token if your plan includes them.
- Does the app have an admin page, a debug page or a development tool that was meant for local use only? Remove or protect it first.
- Do you want requests recorded? The request inspector keeps request details for 24 hours, and bodies only if you turn body capture on.
When you are done
Stop the connector, pause or delete the tunnel, or let it expire. When the connector stops, the public address stops answering.
What to do next
Related
This page is part of Start here. Still stuck? Contact support.