# Site setting to disable local sign ups

**URL:** https://meta.discourse.org/t/site-setting-to-disable-local-sign-ups/401005
**Category:** Feature
**Tags:** login
**Created:** [April 19, 2026, 8:25pm UTC](https://meta.discourse.org/t/site-setting-to-disable-local-sign-ups/401005 "2026-04-19T20:25:19Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Ethsim2](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ethsim2/32/522255_2.png) [@Ethsim2](https://meta.discourse.org/u/Ethsim2)
#### Post date: [April 19, 2026, 8:33pm UTC](https://meta.discourse.org/t/site-setting-to-disable-local-sign-ups/401005/2 "2026-04-19T20:33:27Z")

</div>

could alternatively scope `must_approve_users` with a `must_approve_local_users`

but this would remove a possibility of [disabling initial page that re-directs to /login](https://meta.discourse.org/t/disable-initial-page-that-re-directs-to-login/400773) as a side effect of solving this security vulnerability.

---

_[View the full topic](https://meta.discourse.org/t/site-setting-to-disable-local-sign-ups/401005)._
