# Security & Network Settings
> Source: https://www.fuze-store.com/docs/hub/security-and-network

# Security & Network Settings

**Settings → Network** holds how the Hub is reachable. The defaults are right
for almost every shop, so you can usually leave this screen alone — it's here
for the cases where your setup needs something specific.

## Browser bridge (HTTPS)

This is what the Fuze Store **browser** app connects to, on
`https://localhost:18443` by default. From this computer it's always available
at that address; whether other devices can reach it depends on the network
sharing setting below.

| Setting                  | What it does                                                                        |
| ------------------------ | ----------------------------------------------------------------------------------- |
| **HTTPS port**           | The port the browser connects to. Change only if something else already uses 18443. |
| **Enable secure bridge** | Turns the HTTPS listener on or off entirely.                                        |

  With **Enable secure bridge** off, the browser app cannot connect to this Hub
  at all — no printing, no KDS, no customer display from a browser tab. Phones
  and tablets using the native app are not affected. Leave it on unless you are
  deliberately taking the browser path out of service.

If the bridge can't start you'll see a **Browser bridge error** naming the
cause. The usual one is the local security certificate failing to initialise;
the browser app can't connect until that's resolved. Restart the Hub first —
see [Troubleshooting](/docs/hub/troubleshooting).

## This shop's Hub certificate

Below the bridge settings is a **This shop's Hub certificate** card with a
**Download certificate** button. Browsers on this computer may show **Not
Secure** for the Hub's `https://localhost` address until the certificate is
installed — the Hub issues its own certificate rather than using a public
authority, because public authorities can't issue for local addresses.

Installing it is optional: pairing, printing, and every other Hub feature
work the same either way. If you'd like the proper lock icon, click
**Download certificate**, open the saved file, and follow your computer's
prompts to install it.

  On a Mac the install dialog preselects the **iCloud** keychain, which copies
  the certificate to your iPhone and iPad; on Windows the default store
  selection files it somewhere the browser ignores. Both install without any
  error and neither produces the lock.

  Follow [Installing the Hub
  Certificate](/docs/hub/installing-the-hub-certificate) for the correct steps
  on macOS, Windows, Linux, and Firefox.

  The certificate only vouches for this shop's Hub on this computer — it's not
  a public certificate, and you can remove it from your computer later. The
  matching private key never leaves the Hub computer, and each download is
  recorded in the [Audit Log](/docs/hub/audit-log).

## Sharing the Hub over your network

**On by default**, because it's what lets the phones and tablets on your Wi-Fi
find this Hub and connect to it — at `https://<this-computer's-ip>:<https-port>`
— instead of you typing an address into each one.

Leave it on if you use the Fuze app on any phone or tablet. The browser app on
this same computer doesn't need it, so if that's the only thing talking to the
Hub, you can turn it off.

  Every device on the Wi-Fi can find the Hub, but each one still has to be
  paired before it can print, send tickets, or read anything. That pairing step
  is what keeps the Hub yours — see [Pairing your mobile
  app](/docs/hub/pairing-mobile-app).

  Keep this on for your shop's own Wi-Fi. On a public or shared network — a
  co-working space, a hotel, an event venue — switch it off while you're there
  and back on when you return. Nothing is lost either way; paired devices
  reconnect on their own.

  If you had this switched off before, the update turns it on once so your
  phones can reach the Hub. Turn it off again and it stays off — the change is
  applied a single time, not on every restart.

## Pairing a browser

The same screen has **Pair a new browser**, which generates a short code you
type into the browser app. Full walkthrough:
[Pairing a browser](/docs/hub/pairing-browser-app).

## Saving changes

Network changes restart the Hub's local bridge. Printing and KDS reconnect on
their own within a few seconds; if a device doesn't come back, reload it.

Every change here is recorded in the [Audit Log](/docs/hub/audit-log), including
turning network sharing on or off.

## Related guides

- [Pairing a browser](/docs/hub/pairing-browser-app)
- [Pairing your mobile app](/docs/hub/pairing-mobile-app)
- [Approving Mobile Devices](/docs/hub/approving-mobile-devices)
- [Troubleshooting](/docs/hub/troubleshooting)