Setting up secure access ensures your data stays protected, even when you’re away from your network.
Setting Up Your SSL Certificate
Start by getting an SSL certificate from a trusted provider or by using Synology’s built-in Let’s Encrypt tool. Install it through Control Panel > Security > Certificate and then enable HTTPS so all connections remain encrypted.
Surveillance Station: Commonly uses ports 5000/5001 and additional ports depending on camera configuration.
Cloud Station Sync: Requires TCP 6690 for remote file synchronization.
Photo Station: Enable Photo Station and ensure HTTPS is active for secure sharing.
Tips for Smooth Remote Access
If your internet provider changes your IP frequently, configure DDNS so your device remains accessible at all times. Add your domain as a browser exception if needed.
Ensuring Secure Remote Access with SSL Certificates
SSL certificates secure the connection between your device and your Synology, especially when accessing it over public networks. To avoid browser warnings, install a certificate from a trusted provider such as Let’s Encrypt or DigiCert. Self-signed certificates can work, but they may require adding manual exceptions in your browser.
Hosting Your Synology NAS with a Dynamic WAN IP
Most home internet connections use dynamic IPs that change regularly. DDNS solves this problem by linking your device to a hostname that always points to your current IP.
Use services like DynDNS, No-IP, or DuckDNS to keep your device reachable. Pair DDNS with an SSL certificate for security. Then configure port forwarding for DSM (typically ports 5000 and 5001).
Here’s a quick checklist: – Register a DDNS hostname – Set up DDNS in DSM – Install an SSL certificate – Set up port forwarding – Test remote access
Resolving Login Issues by Editing the System Passwd File
If you’re having trouble logging in with a non-admin user, the issue may be tied to the default shell in the passwd file.
Open /etc/passwd, locate your username, and make sure the shell is set to /bin/sh instead of /sbin/nologin. After saving, refresh your login session. If you are unsure, reach out to support and we can walk you through it.
Unlock More Functionality with Popular Synology Packages
Surveillance Station: Turn your device into a complete video monitoring system.
Cloud Station Sync: Sync your files across devices. Make sure TCP 6690 is open for remote syncing.
Photo Station: Manage your photos in one place. Enable HTTPS redirection for secure access.
These packages add powerful features to your device with minimal setup.
How the User Home Feature Works—and Why You’ll Love It
User Home creates a private folder for each user automatically. Once enabled, each user sees only their own “home” folder, while administrators can view all under the “homes” directory. As you use more services like Synology Drive or Photos, the system adds subfolders automatically.
Enabling the User Home Service
Go to Control Panel → User → Enable User Home Service. Choose your storage location and apply. The system will create home folders for each user automatically. Avoid assigning general read permissions to the “homes” folder for security.
Recommended Backup Solutions
Hyper Backup: Our top recommendation for most users. Supports local and remote backups with strong reliability.
Synology C2: A secure cloud storage option that integrates perfectly with Hyper Backup.
Options to avoid: CrashPlan, Synology Backup (native), and iDrive often present issues or poor integration.
Hyper Backup + Synology C2 gives the smoothest experience overall.
Mapping Network Shares and Home Folders
To ensure safe and clean access:
– Require user authentication before mapping folders – Home folders appear as \diskstation\home after login – Clear old credentials from Windows Credential Manager before mapping new drives – Use net view and net use (command prompt) to manage mappings – Map drives using \diskstation_name\user_name
This keeps everything secure and organized.
Bonus Resources for Backup and Photo Management
You can also access:
– Business data protection guidance – Device-to-device backup setup – USB storage integration – Help with photo library organization
These extras support smoother workflows and better data protection.
Considerations for Documents Folder Redirection
For desktop users, redirecting the Documents folder to a network location is convenient and easy to manage. Laptop users, however, may face syncing issues when offline, working remotely, or switching networks. This setup works best in fixed environments but may require adjustments for mobile users.
Recommended Hardware for Scaling Multi-User and Designer Environments
For growing teams or creative environments, we recommend the Synology DS1522+. It supports up to 25 users and 10 active designers, scales easily, and handles demanding workloads. It’s a reliable investment that minimizes future upgrades.
Securing Remote Access to Your Synology
Here’s a breakdown of your main options:
QuickConnect: Fast and easy, but not end-to-end encrypted.
DDNS: Reliable remote access when combined with HTTPS and SSL.
Custom Domain with SSL: Secure and user-friendly, ideal for professional environments.
VPN: The most secure option. Best for sensitive operations.
Choose based on your security needs and convenience preferences.
Troubleshooting Cloud Station Service Issues
If Cloud Station isn’t working:
– Check if the service is running – Restart the service – Reboot the device if it doesn’t appear – Locate files in /homes/[username]/cloudstation
These steps fix most common problems.
Enabling and Configuring Cloud Station for Users
Start by granting users access to the Cloud Station Server app in Control Panel. Once permissions are assigned, users can sync and share files smoothly across devices.
Instant Synology Help
$247.00
Description
Security Best Practices for Your Synology Device
Here are the most important steps to keep your data secure and your device protected:
Permanently Disable the Default Admin Account:
This removes a common entry point for attackers. Create a unique administrator account instead.
Activate Two-Factor Authentication (2FA):
Add an extra layer of protection to your login process. Most major authenticator apps work with Synology.
Enforce HTTPS Connections:
Ensure all activity on your device is encrypted by redirecting HTTP traffic to HTTPS.
Enable DoS Attack Protection:
Turn on protection features to block denial-of-service attacks.
Use Secure Port Forwarding:
If you need remote access, forward ports carefully. Use non-standard ports and follow trusted guides for accurate configuration.
Update Regularly:
Keep DSM and all packages updated to eliminate known vulnerabilities.
Taking these simple steps will dramatically improve your security and reduce risks.
Secure Remote Access: Key Ports & SSL Certificate Setup
Setting up secure access ensures your data stays protected, even when you’re away from your network.
Setting Up Your SSL Certificate
Start by getting an SSL certificate from a trusted provider or by using Synology’s built-in Let’s Encrypt tool. Install it through Control Panel > Security > Certificate and then enable HTTPS so all connections remain encrypted.
Essential Network Ports for Remote Services
DSM Management:
HTTPS: TCP 5001
HTTP: TCP 5000 (not recommended)
Surveillance Station:
Commonly uses ports 5000/5001 and additional ports depending on camera configuration.
Cloud Station Sync:
Requires TCP 6690 for remote file synchronization.
Photo Station:
Enable Photo Station and ensure HTTPS is active for secure sharing.
Tips for Smooth Remote Access
If your internet provider changes your IP frequently, configure DDNS so your device remains accessible at all times. Add your domain as a browser exception if needed.
Ensuring Secure Remote Access with SSL Certificates
SSL certificates secure the connection between your device and your Synology, especially when accessing it over public networks.
To avoid browser warnings, install a certificate from a trusted provider such as Let’s Encrypt or DigiCert.
Self-signed certificates can work, but they may require adding manual exceptions in your browser.
Hosting Your Synology NAS with a Dynamic WAN IP
Most home internet connections use dynamic IPs that change regularly. DDNS solves this problem by linking your device to a hostname that always points to your current IP.
Use services like DynDNS, No-IP, or DuckDNS to keep your device reachable.
Pair DDNS with an SSL certificate for security.
Then configure port forwarding for DSM (typically ports 5000 and 5001).
Here’s a quick checklist:
– Register a DDNS hostname
– Set up DDNS in DSM
– Install an SSL certificate
– Set up port forwarding
– Test remote access
Resolving Login Issues by Editing the System Passwd File
If you’re having trouble logging in with a non-admin user, the issue may be tied to the default shell in the passwd file.
Open /etc/passwd, locate your username, and make sure the shell is set to /bin/sh instead of /sbin/nologin.
After saving, refresh your login session.
If you are unsure, reach out to support and we can walk you through it.
Unlock More Functionality with Popular Synology Packages
Surveillance Station:
Turn your device into a complete video monitoring system.
Cloud Station Sync:
Sync your files across devices. Make sure TCP 6690 is open for remote syncing.
Photo Station:
Manage your photos in one place. Enable HTTPS redirection for secure access.
These packages add powerful features to your device with minimal setup.
How the User Home Feature Works—and Why You’ll Love It
User Home creates a private folder for each user automatically.
Once enabled, each user sees only their own “home” folder, while administrators can view all under the “homes” directory.
As you use more services like Synology Drive or Photos, the system adds subfolders automatically.
Enabling the User Home Service
Go to Control Panel → User → Enable User Home Service.
Choose your storage location and apply.
The system will create home folders for each user automatically.
Avoid assigning general read permissions to the “homes” folder for security.
Recommended Backup Solutions
Hyper Backup:
Our top recommendation for most users. Supports local and remote backups with strong reliability.
Synology C2:
A secure cloud storage option that integrates perfectly with Hyper Backup.
Options to avoid:
CrashPlan, Synology Backup (native), and iDrive often present issues or poor integration.
Hyper Backup + Synology C2 gives the smoothest experience overall.
Mapping Network Shares and Home Folders
To ensure safe and clean access:
– Require user authentication before mapping folders
– Home folders appear as \diskstation\home after login
– Clear old credentials from Windows Credential Manager before mapping new drives
– Use net view and net use (command prompt) to manage mappings
– Map drives using \diskstation_name\user_name
This keeps everything secure and organized.
Bonus Resources for Backup and Photo Management
You can also access:
– Business data protection guidance
– Device-to-device backup setup
– USB storage integration
– Help with photo library organization
These extras support smoother workflows and better data protection.
Considerations for Documents Folder Redirection
For desktop users, redirecting the Documents folder to a network location is convenient and easy to manage.
Laptop users, however, may face syncing issues when offline, working remotely, or switching networks.
This setup works best in fixed environments but may require adjustments for mobile users.
Recommended Hardware for Scaling Multi-User and Designer Environments
For growing teams or creative environments, we recommend the Synology DS1522+.
It supports up to 25 users and 10 active designers, scales easily, and handles demanding workloads.
It’s a reliable investment that minimizes future upgrades.
Securing Remote Access to Your Synology
Here’s a breakdown of your main options:
QuickConnect:
Fast and easy, but not end-to-end encrypted.
DDNS:
Reliable remote access when combined with HTTPS and SSL.
Custom Domain with SSL:
Secure and user-friendly, ideal for professional environments.
VPN:
The most secure option. Best for sensitive operations.
Choose based on your security needs and convenience preferences.
Troubleshooting Cloud Station Service Issues
If Cloud Station isn’t working:
– Check if the service is running
– Restart the service
– Reboot the device if it doesn’t appear
– Locate files in /homes/[username]/cloudstation
These steps fix most common problems.
Enabling and Configuring Cloud Station for Users
Start by granting users access to the Cloud Station Server app in Control Panel.
Once permissions are assigned, users can sync and share files smoothly across devices.
Related products
Managed Synology C2 Cloud Service
OrderManaged Synology Service Add-on
OrderSynology Security Check Up
Order