# Disable Version Information on WebInterface while logged out

**URL:** <https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828>\
**Category:** Implemented\
**Created:** [May 5, 2021, 8:23pm UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828 "2021-05-05T20:23:57Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![ASFP](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/asfp/32/49798_2.png) [@ASFP](https://discourse.pi-hole.net/u/ASFP)\
**Post date:** [May 5, 2021, 8:23pm UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/1 "2021-05-05T20:23:57Z")

</div>

(Couldn't find this type of request.)

Is there a way to hide the pi-hole Versions on the Web Interface while not logged in?

In my eyes I don't want everyone to be able to see on which version my pi-hole is running when visiting the Web Interface

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [May 6, 2021, 1:00am UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/2 "2021-05-06T01:00:12Z")

</div>

> [@ASFP](#):
>
> I don't want everyone to be able to see on which version my pi-hole is running when visiting the Web Interface

Just curious; why is this a problem? Is your Pi-hole exposed to the internet?

---

<div class="post-metadata">

**Author:** ![ASFP](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/asfp/32/49798_2.png) [@ASFP](https://discourse.pi-hole.net/u/ASFP)\
**Post date:** [May 6, 2021, 6:23am UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/3 "2021-05-06T06:23:19Z")

</div>

My pi-hole is not exposed to the internet. In fact it is in the LAN, as most of the people probably have it. The issue for me is that, when there is an update, it shows this very clearly with the red "Update available" sentence next to the version. On top of that, if you click it you will be forwarded to the github page. On the one side it makes sense because you can see what has changed in the new version. On the other hand, if there is a new version which closes some critical vulnerabilities, everyone on my LAN can get access to this information. Sure some might say devices in your LAN are "trusted", which is untrue in my eyes.

From my security standpoint it is bad practice to enclose the version of any service/application.

---

<div class="post-metadata">

**Author:** ![DanSchaper](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/danschaper/32/91_2.png) [@DanSchaper](https://discourse.pi-hole.net/u/DanSchaper)\
**Post date:** [May 6, 2021, 6:36pm UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/4 "2021-05-06T18:36:20Z")

</div>

I would counter that security through obscurity is an even worse practice.

---

<div class="post-metadata">

**Author:** ![ASFP](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/asfp/32/49798_2.png) [@ASFP](https://discourse.pi-hole.net/u/ASFP)\
**Post date:** [May 6, 2021, 7:48pm UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/5 "2021-05-06T19:48:19Z")

</div>

I can partially agree with that. However, I don't see any advantage in putting the current versions on the front page. The best would be to have an option in the settings which, when activated, does not show the current versions on the front page, but shows it as soon as you're logged in.

I may have stated it wrongly. In my eyes Obscurity is acceptable as long as you're not authenticated. Except for the Admin it should be no ones business to know about the current versions running.

---

<div class="post-metadata">

**Author:** ![DanSchaper](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/danschaper/32/91_2.png) [@DanSchaper](https://discourse.pi-hole.net/u/DanSchaper)\
**Post date:** [May 6, 2021, 8:01pm UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/6 "2021-05-06T20:01:20Z")

</div>

We'll track it as a feature request, and we'll track the popularity of the request.

Changing would require users to log in to the interface to see when they need to update. Adds another step.

---

<div class="post-metadata">

**Author:** ![dnz](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dnz/32/26952_2.png) [@dnz](https://discourse.pi-hole.net/u/dnz)\
**Post date:** [August 25, 2021, 10:11am UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/7 "2021-08-25T10:11:38Z")

</div>

I also think the version should be hidden to logged out users. Information disclosure should be prevented as much as possible, regardless of the type of network

---

<div class="post-metadata">

**Author:** ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)\
**Post date:** [February 24, 2022, 11:30pm UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/10 "2022-02-24T23:30:52Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [September 23, 2022, 10:20pm UTC](https://discourse.pi-hole.net/t/disable-version-information-on-webinterface-while-logged-out/46828/11 "2022-09-23T22:20:18Z")

</div>

Implemented with [Pi-hole FTL v5.17, Web v5.14 and Core v5.12 released](https://discourse.pi-hole.net/t/pi-hole-ftl-v5-17-web-v5-14-and-core-v5-12-released/57497)