diff --git a/src/web/AmsWebServer.cpp b/src/web/AmsWebServer.cpp
index 06fa5546..d8c15b24 100644
--- a/src/web/AmsWebServer.cpp
+++ b/src/web/AmsWebServer.cpp
@@ -87,7 +87,7 @@ void AmsWebServer::setJson(StaticJsonDocument<500> json) {
 }
 
 bool AmsWebServer::checkSecurity(byte level) {
-	bool access = !config->hasConfig() || config->authSecurity < level;
+	bool access = WiFi.getMode() == WIFI_AP || !config->hasConfig() || config->authSecurity < level;
 	if(!access && config->authSecurity >= level && server.hasHeader("Authorization")) {
 		println(" forcing web security");
 		String expectedAuth = String(config->authUser) + ":" + String(config->authPass);