# How can I connect to my node from another device?

## Configuration file changes

Find the lines in the configuration file (**prizm.default.properties**):

{% code title="prizm.allowedBotHosts = \*" %}

```javascript
This line lists the IP addresses of the nodes that can be connected to the node.
The default is * (asterisk) - everyone can connect.
Here you can put your IP address or list a group of addresses through ; (comma_dot)
or enter the network - 192.168.1.0/24.
```

{% endcode %}

{% code title="hello.sh" %}

```javascript
This line defines on which IP address the node will accept connections.
127.0.0.1 is ONLY a local connection, you can put a specific IP that is assigned to the computer
or put 0.0.0.0 - accept connections to all addresses.
```

{% endcode %}

{% hint style="info" %}
Further, if you change the server address, the node will automatically create an **SSL certificate**, it will naturally be self-signed, and you will need to connect to the **<https://ipaddress:9976>** address. All browsers will report fraud and lack of trust in this site.
{% endhint %}

### Certificate enforcement outside of localhost is configured with the lines:

```javascript
prizm.apiSSL = false
prizm.apiServerEnforceSSL=true
```

{% hint style="danger" %}
It is imperative to set the LOCAL administrator password, otherwise anyone can change the behavior of the NODE.

**prizm.adminPassword=**
{% endhint %}

### Why it is better not to do this, or what you need to know and understand.

The behavior of the **NODE** is such that in local addressing (127.0.0.1 or 192.168.0.1 ), the node transmits **YOUR** secret password to sign the transaction to the **SERVER**. When you work at 127.0.0.1, nothing leaves your computer, but if you use a WIFI router or some kind of large switch (which someone can access), you risk l**eaking the PASSWORD,** since WIFI routers are **easily hacked**.

{% hint style="danger" %}
So - in order to keep your password secret, you must either **not change the CONFIG**, or connect the host directly to the Internet address and not accept connections from the local network.
{% endhint %}

### Material for non-believers:

{% embed url="<https://zen.yandex.ru/media/id/5d31f35678125e00adc0c215/kak-vzlomat-parol-ot-wifi-soseda-100-sposob-5d45d2e6e3062c00ad407f22>" %}

{% embed url="<https://habr.com/ru/company/ruvds/blog/534112/>" %}
