What security best practices should I follow regarding my Cloudflare Tunnel private key?

Responsive Ad Header

Question

Grade: Education Subject: Support
What security best practices should I follow regarding my Cloudflare Tunnel private key?
Asked by:
88 Viewed 88 Answers

Answer (88)

Best Answer
(327)
Keep the key file permissions restrictive (e.g., 600), run `cloudflared` as a non-root user, regularly review your Cloudflare dashboard for any suspicious activity, and never share the key with anyone. Consider using a hardware security module (HSM) for even stronger key protection if your security requirements are very high.