Build It

Accessing Your Setup From Other Devices on Your Network

Reach your local AI chat interface from your phone or laptop on the couch, not just from the machine it is installed on - using your home network, nothing more.

10 minute read
Last tested: August 2026 · Open WebUI 0.11.1

Why this matters

Need Open WebUI first? This guide assumes you already have it running - if you don't yet, set it up with Getting a Proper Chat Interface Running (about 15 minutes), then come back here.

Everything up to this point has assumed you're sitting at the machine running Ollama and Open WebUI, typing into localhost. That's fine for setup, but it's not how anyone actually wants to use a chat interface day to day.

You want it from the couch, from bed, from your laptop in another room.

By default, Open WebUI only listens on the machine it's installed on - the setup guide's install command deliberately binds it to 127.0.0.1, not your network address. That's the safe starting point, and this guide is about the step of consciously opening it up.

Opening it up

Widening the binding means recreating the container with a different port mapping. Your chat history and settings are untouched by this - they live in a separate Docker volume, not the container itself:

docker rm -f open-webui
docker run -d -p 3000:8080 --add-host=host.docker.internal:host-gateway -v open-webui:/app/backend/data --name open-webui --restart always ghcr.io/open-webui/open-webui:main

The only change from the original install command is dropping 127.0.0.1: from the port mapping - 3000:8080 instead of 127.0.0.1:3000:8080. That single difference is what makes it reachable on your network instead of just this machine. If you're on Docker Compose, it's the same change to one line in the file, then docker compose up -d again.

Finding your local IP

On the machine running Open WebUI, find its address on your home network:

# Linux
hostname -I

# Mac
ipconfig getifaddr en0

On Windows, open Command Prompt and run ipconfig, then look for the "IPv4 Address" under your active network adapter. You're looking for something in the form 192.168.x.x or 10.0.x.x.

This address can change. Most home routers keep the same address for a device, but it's not guaranteed forever - a router restart or long time offline can shift it. If you're setting this up on a machine you'll come back to often, see the static IP tip in Going Headless.

Connecting from another device

From your phone or laptop, on the same Wi-Fi network, open a browser and go to:

http://192.168.1.XXX:3000

Replace the address with the actual IP you found, keeping :3000 on the end - that's the port Open WebUI listens on. You should see the same login screen and chat interface as on the host machine.

On mobile, add it to your home screen. Most browsers have an "Add to Home Screen" option that gives it its own icon and opens without browser chrome around it - close enough to feel like a real app.
Know what you're actually opening up: this makes your chat interface reachable by any device on your home network, not just yours - anyone else on the same Wi-Fi, including smart home devices and guests with the password, could reach it too if they knew the address. That's a reasonable trade for a home network you trust. See Locking Down Your Local AI Setup before doing the same thing for a network you don't fully control, or before going a step further and exposing anything to the internet.

Only ever need this at home? This is genuinely enough. Want it working when you're not on the same Wi-Fi at all - away from home, on a different network entirely? Access Your Local AI From Anywhere Without Exposing It to the Internet covers that safely, without opening anything to the public internet.

What actually goes wrong

The page times out instead of loading

This is almost always a firewall blocking the port on the host machine, not a networking mistake. On Linux with UFW:

sudo ufw allow 3000/tcp

On Mac, check System Settings → Network → Firewall and confirm it isn't blocking incoming connections for Docker. On Windows, check Windows Defender Firewall's allowed apps list.

UFW is a connectivity check here, not the actual security boundary. Docker manages its own network rules underneath UFW, and the two don't always interact the way people expect - a Docker-published port can behave differently than a normal application would under the same UFW rules. The port binding itself (127.0.0.1 vs. the open binding above) is what actually controls reachability. Treat UFW as one more thing to check if a connection isn't working, not as the thing keeping this setup private.

Your phone says it's connected to Wi-Fi but still can't reach it

Confirm both devices are actually on the same network, not just both on "Wi-Fi." Guest networks are commonly isolated from the main network by design, specifically so guest devices can't reach anything else on it - if your router has a separate guest SSID, connect your phone to the main one instead.

The IP address stopped working after a while

The machine's local IP likely changed after a router restart. Re-run the IP lookup command from above to get the current address, or set up a static IP reservation in your router settings so this stops happening.

Common questions

Does this expose my setup to the internet?
No. This only makes it reachable by devices already on your home Wi-Fi or network. Reaching it from outside your home network is a separate, much bigger step covered in Locking Down Your Local AI Setup.
Why does my phone say it can't connect even though I typed the right IP?
The most common cause is being on a different network - guest Wi-Fi networks are often isolated from the main network on purpose, so a phone on guest Wi-Fi can't reach a machine on the main network even though both say "connected to Wi-Fi."

Go deeper

This guide covers reaching your setup from your own home network. Here's where to go if you want something different.

Changelog

  • 2026-08-31: Rewritten for the new local-by-default install - this guide now covers deliberately widening the port binding, since Open WebUI is no longer reachable on the network out of the box.
Keep exploring See everything else worth knowing, whenever you actually want it.
Explore more guides →

Written from hands-on security operations experience. More about this site →