# Automatically logging in as admin?

**URL:** <https://forum.ghost.org/t/automatically-logging-in-as-admin/15206>\
**Category:** Developer help\
**Created:** [June 18, 2020, 7:18pm UTC](https://forum.ghost.org/t/automatically-logging-in-as-admin/15206 "2020-06-18T19:18:27Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kiki](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/kiki/32/8504_2.png) [@Kiki](https://forum.ghost.org/u/Kiki)\
**Post date:** [June 18, 2020, 7:18pm UTC](https://forum.ghost.org/t/automatically-logging-in-as-admin/15206/1 "2020-06-18T19:18:27Z")

</div>

Hello, I’m using Ghost 3.20 and today I realised it was automatically logging people into my admin account when somebody went to [mysiteurl.com/ghost/](http://mysiteurl.com/ghost/). Not just my computer, but on other people’s computers who never had an account on the site before. Did this happen with anyone else?

---

<div class="post-metadata">

**Author:** ![Hannah](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/hannah/32/22_2.png) [@Hannah](https://forum.ghost.org/u/Hannah)\
**Post date:** [June 18, 2020, 7:41pm UTC](https://forum.ghost.org/t/automatically-logging-in-as-admin/15206/2 "2020-06-18T19:41:21Z")

</div>

Never heard of this happening before. Can you share some more details about your site setup?

---

<div class="post-metadata">

**Author:** ![Kiki](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/kiki/32/8504_2.png) [@Kiki](https://forum.ghost.org/u/Kiki)\
**Post date:** [June 18, 2020, 9:40pm UTC](https://forum.ghost.org/t/automatically-logging-in-as-admin/15206/3 "2020-06-18T21:40:26Z")

</div>

Sorry, what do you mean by details about my site setup? Should I DM you the site link? @Hannah

---

<div class="post-metadata">

**Author:** ![Kiki](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/kiki/32/8504_2.png) [@Kiki](https://forum.ghost.org/u/Kiki)\
**Post date:** [June 18, 2020, 11:15pm UTC](https://forum.ghost.org/t/automatically-logging-in-as-admin/15206/4 "2020-06-18T23:15:30Z")

</div>

EDIT: nevermind fixed, it was a caching error

---

<div class="post-metadata">

**Author:** ![benravetta](https://avatars.discourse-cdn.com/v4/letter/b/85e7bf/32.png) [@benravetta](https://forum.ghost.org/u/benravetta)\
**Post date:** [June 19, 2020, 2:03am UTC](https://forum.ghost.org/t/automatically-logging-in-as-admin/15206/5 "2020-06-19T02:03:10Z")

</div>

Still, share some more details about this? What do you mean “It was a caching error” ?

---

<div class="post-metadata">

**Author:** ![Kiki](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/kiki/32/8504_2.png) [@Kiki](https://forum.ghost.org/u/Kiki)\
**Post date:** [June 19, 2020, 3:11am UTC](https://forum.ghost.org/t/automatically-logging-in-as-admin/15206/6 "2020-06-19T03:11:37Z")

</div>

Oh I was using two caching services, Ezoic and Cloudflare’s so I guess it messed with the cookies somehow. The only change i made recently to the site was turning on Ezoic’s caching so it just fixed itself after I turned it off.

---

<div class="post-metadata">

**Author:** ![Hannah](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/hannah/32/22_2.png) [@Hannah](https://forum.ghost.org/u/Hannah)\
**Post date:** [June 19, 2020, 6:17am UTC](https://forum.ghost.org/t/automatically-logging-in-as-admin/15206/7 "2020-06-19T06:17:36Z")

</div>

@Kiki

When you opened this topic there was a template with suggested details to provide.

Given there was no background info about how your site was setup, no one could have helped. You’re also using an obscure cache that turns up zero results both here on the forum and in our docs. Very hard to guess that!

It sounds like you had caching enabled for API requests and then cached the response to your successful login and served that to other visitors.