# Discourse on iOS devices is not loading properly when enabling password protection

**URL:** https://meta.discourse.org/t/discourse-on-ios-devices-is-not-loading-properly-when-enabling-password-protection/185979
**Category:** Support
**Created:** [April 7, 2021, 8:58pm UTC](https://meta.discourse.org/t/discourse-on-ios-devices-is-not-loading-properly-when-enabling-password-protection/185979 "2021-04-07T20:58:24Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [April 7, 2021, 9:03pm UTC](https://meta.discourse.org/t/discourse-on-ios-devices-is-not-loading-properly-when-enabling-password-protection/185979/2 "2021-04-07T21:03:24Z")

</div>

> [@Restrict access to your Discourse site with HTTP Basic Authentication](https://meta.discourse.org/t/restrict-access-to-your-discourse-site-with-http-basic-authentication/168192/1):
>
> NOTE: I have had some trouble with basic-auth recently in which some static assets weren’t getting loaded. It might be easier to just configure your site for `login_required` by adding `DISCOURSE_LOGIN_REQUIRED: true` in the `env` section of your `app.yml` .

I think that it won’t work because the browser isn’t quite playing by the same rules that the web server is.

If you know how to get your phone to override DNS, you could remove the publie DNS record for the site (then no one could access it), and tell only your phone to use your private DNS. I don’t know how to do that. You’d google something like “ios DNS spoof”.

Or, you can let login-required be good enough for your testing.

---

_[View the full topic](https://meta.discourse.org/t/discourse-on-ios-devices-is-not-loading-properly-when-enabling-password-protection/185979)._