Couch Lag

Can’t open the Sunshine web UI, or forgot the password

Updated · By Couch Lag

Short answer: Sunshine’s web UI runs on the host at https://localhost:47990. Your browser will warn that the site isn’t secure because Sunshine uses a self-signed certificate, and Sunshine’s docs say to ignore that. From another device, use the host’s local IP address, which works only on your home network by default. If you forgot the login, run sunshine --creds with a new username and password.

Checked October 31, 2026 against Moonlight PC v6.2.0 and Sunshine v2026.914.233613 (latest stable releases) and their documentation. Sources are listed at the end of the page.

1. Open it on the host

On the PC running Sunshine, open https://localhost:47990 in a browser, or use the “Open Sunshine” option in the tray menu on Windows. If you changed Sunshine’s port setting, the other ports shift with it, so check the port shown in the configuration UI.

2. The “not secure” warning is expected

Sunshine uses a self-signed certificate, so browsers show an “insecure website” warning. Both Sunshine’s and Moonlight’s setup docs say you can safely ignore it for the web UI.

3. Opening it from another device

Replace localhost with the host’s local IP address, for example https://192.168.1.20:47990. The origin_web_ui_allowed setting controls who can reach it:

  • pc: only the host itself
  • lan: devices on your local network (the default)
  • wan: anyone

Keep it on lan or pc. Moonlight’s setup guide points out that anyone with access to this interface can add new clients that can reach your computer remotely.

4. Forgot the username or password

Run one of these on the host, replacing the braces and their contents with your new details:

Install typeCommand
Most installssunshine --creds {new-username} {new-password}
AppImage./sunshine.AppImage --creds {new-username} {new-password}
Flatpakflatpak run --command=sunshine dev.lizardbyte.app.Sunshine --creds {new-username} {new-password}

Sunshine stores the web UI login in its state file (sunshine_state.json by default).

5. The page doesn’t load at all

  • Is Sunshine running? The Windows installer sets it up as a background service by default. On Linux, start it with systemctl --user start app-dev.lizardbyte.app.Sunshine, or enable it at login with systemctl --user --now enable app-dev.lizardbyte.app.Sunshine.
  • Firewall: Sunshine’s first suggestion for an unreachable web UI is to check the firewall rules. Moonlight’s connection guide lists the ports.
  • Only one copy: Sunshine’s docs advise against running more than one instance.

6. Once you’re in: pairing

When Moonlight shows a PIN, open PIN in the web UI’s navigation bar, type the PIN, give the device a name and submit. You should see a success message. Logs for any errors are in the Troubleshooting tab.

FAQ

What is the default Sunshine web UI address?

https://localhost:47990 on the host. From another device on your network, use the host’s local IP address with the same port.

How do I reset the Sunshine password?

Run sunshine --creds followed by a new username and password on the host. AppImage and Flatpak installs use their own forms of the same command, listed in Sunshine’s troubleshooting docs.

Is the “your connection is not private” warning dangerous?

For Sunshine’s own web UI on your network, it is expected. Sunshine uses a self-signed certificate, and its docs say to ignore the warning. Don’t expose the web UI to the internet.

Sources