# How can I change the 80 port that certbot wants?

**URL:** <https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974>\
**Category:** Help\
**Created:** [April 23, 2023, 11:20am UTC](https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974 "2023-04-23T11:20:42Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![ElisS](https://avatars.discourse-cdn.com/v4/letter/e/b5e925/32.png) [@ElisS](https://community.letsencrypt.org/u/ElisS)\
**Post date:** [April 23, 2023, 11:20am UTC](https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974/1 "2023-04-23T11:20:42Z")

</div>

Hi!  
**I ran this command:** certbot certonly --standalone  
**and then I entered my domain name:** `example.com`  
**It produced this output:** Problem binding to port 80: [WinError 10013] An attempt was made to access a socket in a way forbidden by its access permissions

I'm using port 80 and can't change it. I wonder if I can change the port 80 that certbot uses? or How can I change it?

_The operating system my web server runs on is: win10_  
_I can login to a root shell on my machine: I don't know_  
_I'm using a control panel to manage my site: no_

---

<div class="post-metadata">

**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\
**Post date:** [April 23, 2023, 11:50am UTC](https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974/2 "2023-04-23T11:50:13Z")

</div>

> [@ElisS](#):
>
> I wonder if I can change the port 80 that certbot uses?

Well, yes, you can but the HTTP Challenge coming from the Let's Encrypt server will still be on port 80. You can have --standalone listen on a different port but you must then forward or proxy the original HTTP request to that --standalone port

Often, you are better off using a Windows focused ACME Client such as Certify The Web. Or, let us know why you need to use --standalone and we can advise.

> **[ACME Client Implementations - Let's Encrypt](https://letsencrypt.org/docs/client-options/#clients-windows-/-iis)**
>
> Last updated: Jul 22, 2023 | See all Documentation Let’s Encrypt uses the ACME protocol to verify that you control a given domain name and to issue you a certificate. To get a Let’s Encrypt certificate, you’ll need to choose a piece...

---

<div class="post-metadata">

**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\
**Post date:** [April 23, 2023, 6:04pm UTC](https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974/3 "2023-04-23T18:04:15Z")

</div>

> [@ElisS](#):
>
> I wonder if I can change the port 80 that certbot uses?

Asking if a constant number such as 80 can be changed doesn't make sense to me, I cannot change [Pi](https://en.wikipedia.org/wiki/Pi).  
Asking if there is an alternate to using 80, does make sense as a question.

The ACME [HTTP-01 challenge](https://letsencrypt.org/docs/challenge-types/#http-01-challenge) requires Port 80. The [HTTP-01 challenge](https://letsencrypt.org/docs/challenge-types/#http-01-challenge) of the [Challenge Types - Let's Encrypt](https://letsencrypt.org/docs/challenge-types/) describes the details. You cannot change to UDP Port 80, it must be TCP Port 80.

If Port 80 is not an option for you there are 2 other choices:

1. [DNS-01 challenge](https://letsencrypt.org/docs/challenge-types/#dns-01-challenge); accessing the Domain's DNS Records are needed.
2. [TLS-ALPN-01](https://letsencrypt.org/docs/challenge-types/#tls-alpn-01); Port 443 is required.

> [@DNS providers who easily integrate with Let's Encrypt DNS validation](https://community.letsencrypt.org/t/dns-providers-who-easily-integrate-with-lets-encrypt-dns-validation/86438):
>
> I…

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [April 23, 2023, 6:08pm UTC](https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974/4 "2023-04-23T18:08:34Z")

</div>

Looks like you are using Windows and _something_ is already using port 80.  
The `--standalone` option would try to start a web service on that same port.

---

<div class="post-metadata">

**Author:** ![webprofusion](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/webprofusion/32/85310_2.png) [@webprofusion](https://community.letsencrypt.org/u/webprofusion)\
**Post date:** [April 25, 2023, 2:01am UTC](https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974/5 "2023-04-25T02:01:54Z")

</div>

@ElisS Could you perhaps step back a little and explain what you are trying to achieve as there may be different ways to do that same thing. e.g. what is the certificate for. Is it a website, what web server are you running (if any).

If you are trying to get a cert for a home machine you still need a public domain name etc before a public certificate can be issued.

---

<div class="post-metadata">

**Author:** ![leeyc0](https://avatars.discourse-cdn.com/v4/letter/l/e56c9b/32.png) [@leeyc0](https://community.letsencrypt.org/u/leeyc0)\
**Post date:** [April 25, 2023, 2:37am UTC](https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974/6 "2023-04-25T02:37:52Z")

</div>

If you are running HTTP server on TCP 80 and can control the content of the website, certbot --webroot may be a viable alternative for you.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [May 25, 2023, 2:38am UTC](https://community.letsencrypt.org/t/how-can-i-change-the-80-port-that-certbot-wants/196974/7 "2023-05-25T02:38:13Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
