[GH-ISSUE #1608] Optional auth requirement for accessing public lists #1004

New issue

Open

opened 2026-03-02 11:54:19 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 11:54:19 +03:00

Owner

Originally created by @RyanTheTechMan on GitHub (Jun 13, 2025).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/1608

Describe the feature you'd like

Currently, public lists can be accessed by anyone, including users who are not signed in. I would like to have an option to restrict access to public lists so that only authenticated (logged-in) users can view them. This setting would allow list owners to make their lists discoverable while still maintaining a basic level of access control.

(If shared lists are still planned, this feature request still applies for when the list has a public link)

Describe the benefits this would bring to existing Karakeep users

This feature would give the feeling of more security over who can see public lists. It helps to protect sensitive information and reducing unwanted access.

Can the goal of this request already be achieved via other means?

No. As of now, public lists are accessible to anyone with the link, regardless of authentication status. There is no way to require sign-in for public lists.

Have you searched for an existing open/closed issue?

I have searched for existing issues and none cover my fundamental request

Additional context

This issue is related to the new public lists option and can not directly be resolved by #37's shared lists as it limits the idea of a public list.

Depending on the implementation, a simple ENV var could be used to restrict this service wide rather than a per list option. Some users would like total data privacy and control.

Originally created by @RyanTheTechMan on GitHub (Jun 13, 2025). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/1608 ### Describe the feature you'd like Currently, public lists can be accessed by anyone, including users who are not signed in. I would like to have an option to restrict access to public lists so that only authenticated (logged-in) users can view them. This setting would allow list owners to make their lists discoverable while still maintaining a basic level of access control. (If shared lists are still planned, this feature request still applies for when the list has a public link) ### Describe the benefits this would bring to existing Karakeep users This feature would give the feeling of more security over who can see public lists. It helps to protect sensitive information and reducing unwanted access. ### Can the goal of this request already be achieved via other means? No. As of now, public lists are accessible to anyone with the link, regardless of authentication status. There is no way to require sign-in for public lists. ### Have you searched for an existing open/closed issue? - [x] I have searched for existing issues and none cover my fundamental request ### Additional context This issue is related to the new public lists option and can not directly be resolved by #37's shared lists as it limits the idea of a public list. Depending on the implementation, a simple ENV var could be used to restrict this service wide rather than a per list option. Some users would like total data privacy and control.