Network ports · 8443
8443 — HTTPS alternate
Port 8443 is a common alternate HTTPS port for admin interfaces and application servers.
Key facts
| Port | 8443 |
|---|---|
| Transport | TCP |
| Service | HTTPS alternate |
| Common uses | Admin UI, app server |
| Encryption | TLS when configured |
| Range | Registered (1024–49151) |
HTTPS without 443
8443 is the HTTPS counterpart to 8080: an unprivileged port used by application servers and management consoles. It often serves a self-signed certificate or an internal CA certificate, because the service was deployed for administrators rather than the public.
A padlock on 8443 is not proof that the service is trustworthy. Certificate validity, hostname matching and the authentication in front of the console still matter.
Management surfaces
Admin consoles tend to concentrate power: deployments, user management, logs. Restrict them to a VPN or an allowlist, require multi-factor authentication, and keep them patched. A forgotten console on 8443 is a high-value target.
If the service is public, use a proper certificate and put it behind the same monitoring and rate limiting as the main site.
Frequently asked questions
Is 8443 automatically secure?
No. It is just a port. Security depends on TLS configuration, certificate validation and authentication.
Why do admin panels use 8443?
It is an unprivileged HTTPS port, so the service can run without root privileges.