Hi, is there a way to password protect network shares. I can’t see anything in the system or network settings or find a definitive answer in the forum.
The reason I need this is that my Volumio player is used both at home and in a shared / guest network.
RPi 5, 4Gb
Volumio: 4.073
Hey @dadadac,
There is no built-in UI option for password protecting network shares in Volumio.
However, Samba authentication already exists by default:
If you connect to the share using username “volumio” and password “volumio” from your client device, you get authenticated access. Guest connections are limited to browsing.
That said, the underlying problem here is network architecture, not Volumio configuration. When operating on a shared/guest network, proper network isolation should be in place at the router/access point level:
With proper guest network segmentation, devices on the guest network cannot discover or access your Volumio at all - they are completely isolated from your home network segment where Volumio resides.
A UI toggle to completely disable SMB/NFS sharing would address your use case, but this would require backend changes. If this is something you would find valuable, consider posting in the Feature Requests category.
Kind Regards,
On my fresh v4 RPi build OOB guess access is set to read/write with no challenge for a username or password. This is bad practice for any device and at a minimum I would expect to connect to the shares using a username and password. Local security starts at the device and should be controlled by the device.
This is my vanilla Samba config for /data/INTERNAL:
[Internal Storage]
comment = Dacdac Internal Music Folder
path = /data/INTERNAL
read only = no
guest ok = yes
A toggle switch for authenticated access to network shares would be an obvious solution + the option to change the samba password for the volumio user. To me this is a critical feature request and despite the fact I’m really enjoying the player could be a deal breaker.
Regarding your other point on the network layer providing the devices security this is not best practice as stated above - Network security provides a second layer and yes if you have the skills to configure a VLAN this could be an option. But this requires an advanced level of networking knowledge and may be challenging for the average user.
I will add a feature request for a network security option in the UI.
Any other comments welcome on this thread on how we protect our music assets in shared network environments.