Resolving Disconnection Issues in OpenClaw Control UI

If you're working with OpenClaw and encounter the 'Disconnected (1008): control ui requires HTTPS or localhost (secure context)' error, you're not alone. This issue often arises when attempting to run the interface on a Hostinger VPS, as outlined in a user query on Reddit.
The core of this issue is that the control UI requires a secure connection provided by HTTPS or localhost, but your setup might be using HTTP. To restore access, you have a few options:
Solution Options
- Switch to HTTPS: Implement HTTPS using a tool like Tailscale Serve. This involves setting up Tailscale on your VPS to create a secure connection, ultimately preventing your browser from blocking the device identity.
- Use Localhost: If possible, run the application on localhost by visiting
http://127.0.0.1:18789directly on the gateway host. - Allow Insecure HTTP Auth: For those who need to stay on HTTP, modify the configuration to allow insecure authentication. This involves setting
gateway.controlUi.allowInsecureAuth: truein the configuration file, though this should only be done with care as it reduces your security posture.
Practical Steps
Start by determining which solution best fits your environment:
- For HTTPS: Follow the Tailscale Serve documentation to configure HTTPS access.
- For Localhost: Ensure your application and the machine accessing it are both on the same network, then open the specified URL.
- For Insecure HTTP: Update your VPS configuration file to include
gateway.controlUi.allowInsecureAuth: true. Be sure you understand the security implications.
This needs some configuration on your VPS. You'll typically be editing a configuration file, often found either in your project's directory or a system-wide configuration path depending on your setup.
📖 Read the full source: r/clawdbot
👀 See Also

SOUL.md rules drift in long AI agent sessions and how to fix it
SOUL.md rules work perfectly for the first 10-15 messages but start drifting around message 20-30 as conversation context overrides the initial system prompt. The solution is to use /new more aggressively to reset sessions before each distinct task.

Accessing USB Webcams in WSL2 for Local Motion Detection
A developer shares how to use usbipd-win to pass USB webcams from Windows to WSL2, enabling local motion detection with OpenCV without cloud dependencies.

Slash Claude costs 60x by offloading mechanical tasks to DeepSeek V4 Flash via MCP
A Reddit user cut Claude API spend 60x by routing file classification, JSON reformatting, and field extraction to DeepSeek V4 Flash via a simple MCP tool and a CLAUDE.md deny-list rule.

Master OpenClaw on Your Android Smartphone: A Comprehensive Tutorial
Curious about harnessing the potential of OpenClaw on your Android smartphone? This tutorial provides step-by-step guidance on getting started, covering essential tips and tricks from the vibrant OpenClaw community.