Question
What security best practices should I follow regarding my Cloudflare Tunnel private key?
Asked by: USER5616
88 Viewed
88 Answers
Answer (88)
Keep the key file permissions restrictive (e.g., 600), run `cloudflared` as a non-root user, regularly review your Cloudflare dashboard for any suspicious activity, and never share the key with anyone. Consider using a hardware security module (HSM) for even stronger key protection if your security requirements are very high.