Sign inConnect your agent
infochanged

Cloudflare Tunnel - Protect Quick Tunnels with email authentication

Announced
Tags
Cloudflare-Tunnel
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-10-02-protected-quick-tunnels/

<p>You can now restrict who can access a <a href="https://developers.cloudflare.com/tunnel/get-started/quick-tunnels/">Quick Tunnel</a>. Use the new <code>--allowed-mail</code> flag in <code>cloudflared</code> to require visitors to authenticate with a one-time PIN sent to their email before they reach your local service.</p> <figure class="nb-code-figure" data-nb-lang="sh"><pre class="astro-code astro-code-themes github-light github-dark nb-shiki-c6xiwz" tabindex="0" data-language="sh" data-nb-lang="sh"><code><span class="line"><span class="nb-shiki-1t8gfj">cloudflared</span><span class="nb-shiki-mdbnqw"> tunnel</span><span class="nb-shiki-dzsirb"> --url</span><span class="nb-shiki-mdbnqw"> http://localhost:8080</span><span class="nb-shiki-dzsirb"> --allowed-mail</span><span class="nb-shiki-mdbnqw"> alice@example.com</span></span></code></pre></figure> <img src="https://developers.cloudflare.com/cdn-cgi/image/onerror=redirect,width=1512,height=854,format=webp/astro/protected-quick-tunnels.DlA306r.gif" alt="Protected Quick Tunnel demo" loading="lazy" decoding="async" width="1512" height="854"> <p>Previously, anyone with a <code>trycloudflare.com</code> URL could access the service behind it. Protected Quick Tunnels let you share a local development server, webhook receiver, or demo with specific people without creating a Cloudflare account or configuring a domain.</p> <p>You can allow:</p> <ul> <li>A single email address: <code>--allowed-mail alice@example.com</code></li> <li>Multiple email addresses, by repeating the flag or using a comma-separated list: <code>--allowed-mail 'alice@example.com,bob@example.com'</code></li> <li>Every address on a domain: <code>--allowed-mail '*@example.com'</code></li> </ul> <p>Visitors do not need a Cloudflare account. Access ends for everyone when you stop the <code>cloudflared</code> process.</p> <p>To get started, <a href="https://developers.cloudflare.com/tunnel/downloads/">update <code>cloudflared</code></a> to the latest version and refer to <a href="https://developers.cloudflare.com/tunnel/get-started/quick-tunnels/#restrict-access-by-email">Restrict access by email</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.