# \[Self hosted\] Unknown User Appeared in My Self-Hosted NocoDB Instance

**URL:** <https://community.nocodb.com/t/self-hosted-unknown-user-appeared-in-my-self-hosted-nocodb-instance/2062>\
**Category:** Self-Host\
**Created:** [August 19, 2025, 5:30am UTC](https://community.nocodb.com/t/self-hosted-unknown-user-appeared-in-my-self-hosted-nocodb-instance/2062 "2025-08-19T05:30:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Devel0per](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.nocodb.com/devel0per/32/768_2.png) [@Devel0per](https://community.nocodb.com/u/Devel0per)\
**Post date:** [August 19, 2025, 5:30am UTC](https://community.nocodb.com/t/self-hosted-unknown-user-appeared-in-my-self-hosted-nocodb-instance/2062/1 "2025-08-19T05:30:50Z")

</div>

I have no idea how this person managed to join my NocoDB instance. I’ve set a strong password, so it shouldn’t be possible for a stranger to access it. I removed him from the user management. he had an organization-level viewer role. Can someone explain how this guy got in?

 ![Capture](https://canada1.discourse-cdn.com/flex011/uploads/nocodb/original/1X/d07391ced5fe9a34d0eb393aa5ca6d87e8591b84.png)

---

<div class="post-metadata">

**Author:** ![dstala](https://avatars.discourse-cdn.com/v4/letter/d/f04885/32.png) [@dstala](https://community.nocodb.com/u/dstala)\
**Post date:** [August 19, 2025, 5:39am UTC](https://community.nocodb.com/t/self-hosted-unknown-user-appeared-in-my-self-hosted-nocodb-instance/2062/2 "2025-08-19T05:39:33Z")

</div>

As it’s self hosted, it should be someone with access to your instance who has signed up. You can disable new user Sign up’s & restrict them to invite only if you wish to.

You can set this from your user account settings menu

 ![Screenshot 2025-08-19 at 11.07.30 AM](https://canada1.discourse-cdn.com/flex011/uploads/nocodb/original/1X/fab63decbc7c6847303b8b760ab37fb6f2724547.png)

---

<div class="post-metadata">

**Author:** ![Devel0per](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.nocodb.com/devel0per/32/768_2.png) [@Devel0per](https://community.nocodb.com/u/Devel0per)\
**Post date:** [August 19, 2025, 6:26am UTC](https://community.nocodb.com/t/self-hosted-unknown-user-appeared-in-my-self-hosted-nocodb-instance/2062/3 "2025-08-19T06:26:12Z")

</div>

Thank you sir!! now i know!