We've added a new admin toolbar for staff users to Ghost that shows up whenever you're browsing your website.
Now you can jump over to your admin panel, make quick edits if you spot a typo, view analytics, or access comment moderation. The toolbar automatically shows appropriate actions based on which page of the site you're currently on.
The toolbar is only ever visible to authenticated Ghost Admin staff users, and is otherwise hidden for all other visitors to your site.
To enable it, click the icon in Ghost Admin to open your website in a new window:
After that, the admin toolbar will automatically show up whenever you visit your site, unless you manually hide it again.
Footnote for Safari users: If the toolbar isn't showing up, you may need to uncheck "Prevent cross-site tracking" in Safari→Settings→Privacy, due to browser limitations.
Ghost(Pro) users can log in and start enjoying all of this right away! If you're a developer, self-hosting Ghost, you'll need to update to the latest version to get access to everything that's new.
Thanks so much. The toolbar wasn’t showing up for me on Mozilla Firefox. The fix was similar to Safari: Settings→Privacy→Enhanced Tracking Protection→Manage Exceptions→Add your sites as exceptions.
That actually worked for you in Firefox? Lucky you then, as that makes no difference for me.
I had both my website.ghost.io and website.com domains excluded from Enhanced Tracking Protection prior to the toolbar being launched, and while I could see the toolbar in Chrome a week or so ago when it launched I couldn’t see it in Firefox. A few days ago it did appear out of the blue in Firefox for about 20 minutes, but then disappeared shortly thereafter and has never returned.
Perhaps I’ll try adding back the Enhanced Tracking Protection and then removing it in hopes it “resets” things.
I would respectfully like to point out that if you’re looking for privacy, you need to significantly improve your Firefox or switch to a fork that really incorporates privacy by design.
Enabling that specific option in Firefox only makes you more “visible” by having it, because browser tracking is neither mitigated nor addressed by Firefox. So, you start to be on the logs ‘one who wants privacy’.
Ghost is not designed with privacy on mind, so we get to disable/self-host funcitonalities like Portal or event this new admin toolbar that I can’t view on my privacy focused browser because I don’t want this type of requests:
Content-Security-Policy: The page’s settings blocked a script (script-src-elem) at https://cdn.jsdelivr.net/ghost/admin-toolbar@~0.1/umd/admin-toolbar.min.js from being executed because it violates the following directive
I had hoped that Ghost would understand that its user base particularly values open source, privacy, and the freedom to choose which services to use. And that it would generate the base code so that each site could publish its files, primarily JavaScript.
Then I realized that commercial considerations (tracking or locking into specific services/integrations) carry more weight, which is why I don’t usually get on board with the new features it introduces—they always have some flaw where information can leak, be exposed, or, in the worst-case scenario, exploited.
Actually you can already set where to fetch Ghost Apps from by setting their urls in Ghost config. In Synaps Media, we serve all Ghost app scripts over our cdn.synaps.media domain for both performance and privacy reasons, by default. Magic Pages also gives an option to serve Ghost Apps from subpath. Of course you still need to have source files, or a proxy over your own domain (like we do in Synaps Media), and it would be better to have a switch on Ghost admin that arranges this automatically, but for self-hosters generally that kind of things are always in Ghost config file.
No shit, that actually worked! Thanks! That must have been how I inadvertently got it to work for a few minutes last week.
With your tip in mind I was then able to go to a draft post that I’d previously opened directly from a bookmark, reload it, and the toolbar appeared. A bit of a workaround, but it’s gotten things working. Thanks again.
You gave me an idea. Accessing my website through the Ghost panel isn’t natural to me and is one extra step. I usually just start typing the name in my browser’s url bar — but that doesn’t bring up the admin toolbar. I found a simple fix: append:
?admin=1
at the end of the URL of any page on your site (while being logged in as an admin ofc).
Even better, thanks. I think what I’ll do is add a mywebsite.com/?admin=1 bookmark to my bookmark toolbar which I can click on whenever I intend to do any writing or what have you.
