Any way to change default port 53682?

STOP and READ USE THIS TEMPLATE NO EXCEPTIONS - By not using this, you waste your time, our time and really hate puppies. Please remove these two lines and that will confirm you have read them.

What is the problem you are having with rclone?

My computer is running both Microsoft virtual machine software and windows subsystem for Linux.

TCP port 53682 is reserved by the system and cannot be used by rclone to authenticate a new remote. I couldn't find any Flags that would allow me to change the default port number to something else. Is this permanently hard coded?

Run the command 'rclone version' and share the full output of the command.

rclone version

rclone v1.74.1

  • os/version: Microsoft Windows 11 Pro 25H2 25H2 (64 bit)

  • os/kernel: 10.0.26200.7623 (x86_64)

  • os/type: windows

  • os/arch: amd64

  • go/version: go1.26.3

  • go/linking: static

  • go/tags: cmount

Which cloud storage system are you using? (eg Google Drive)

Onedrive, although it really doesn't matter what remote because none of them can authenticate because they can't open the browser on Port 53682

The command you were trying to run (eg rclone copy /tmp remote:tmp)

Rclone config

Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

The config output is normal until it gets to the point where it wants to open up a web browser to authenticate on port 53682

A log from the command that you were trying to run with the -vv flag

Paste log here

C:\Users\dking>rclone -vv config --config="C:\users\dking\rclone\rclone.conf"

2026/05/10 18:27:45 DEBUG : rclone: Version "v1.74.1" starting with parameters ["rclone" "-vv" "config" "--config=C:\users\dking\rclone\rclone.conf"]

2026/05/10 18:27:45 DEBUG : Using config file from "C:\users\dking\rclone\rclone.conf"

Current remotes:

Name Type

==== ====

bblaze1 b2

dkod onedrive

googlek3 drive

pcloud pcloud

e) Edit existing remote

n) New remote

d) Delete remote

r) Rename remote

c) Copy remote

s) Set configuration password

q) Quit config

e/n/d/r/c/s/q> n

Enter name for new remote.

name> apcug-demo

Option Storage.

Type of storage to configure.

Choose a number from below, or type in your own value.

42 / Microsoft OneDrive

\ (onedrive)

Storage> 42

2026/05/10 18:27:59 DEBUG : apcug-demo: config in: state="*all", result=""

2026/05/10 18:27:59 DEBUG : apcug-demo: config out: out=&{State:*all-set,0,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:27:59 DEBUG : apcug-demo: config: reading config parameter "client_id"

Option client_id.

OAuth Client Id.

Leave blank normally.

Enter a value. Press Enter to leave empty.

client_id>

2026/05/10 18:28:02 DEBUG : apcug-demo: config in: state="*all-set,0,false", result=""

2026/05/10 18:28:02 DEBUG : apcug-demo: config out: out=&{State:*all,1,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:02 DEBUG : apcug-demo: config in: state="*all,1,false", result=""

2026/05/10 18:28:02 DEBUG : apcug-demo: config out: out=&{State:*all-set,1,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:02 DEBUG : apcug-demo: config: reading config parameter "client_secret"

Option client_secret.

OAuth Client Secret.

Leave blank normally.

Enter a value. Press Enter to leave empty.

client_secret>

2026/05/10 18:28:03 DEBUG : apcug-demo: config in: state="*all-set,1,false", result=""

2026/05/10 18:28:03 DEBUG : apcug-demo: config out: out=&{State:*all,2,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:03 DEBUG : apcug-demo: config in: state="*all,2,false", result=""

2026/05/10 18:28:03 DEBUG : apcug-demo: config out: out=&{State:*all,3,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:03 DEBUG : apcug-demo: config in: state="*all,3,false", result=""

2026/05/10 18:28:03 DEBUG : apcug-demo: config out: out=&{State:*all,4,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:03 DEBUG : apcug-demo: config in: state="*all,4,false", result=""

2026/05/10 18:28:03 DEBUG : apcug-demo: config out: out=&{State:*all,5,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:03 DEBUG : apcug-demo: config in: state="*all,5,false", result=""

2026/05/10 18:28:03 DEBUG : apcug-demo: config out: out=&{State:*all,6,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:03 DEBUG : apcug-demo: config in: state="*all,6,false", result=""

2026/05/10 18:28:03 DEBUG : apcug-demo: config out: out=&{State:*all-set,6,false Option:global OAuth: Error: Result:}, err=

2026/05/10 18:28:03 DEBUG : apcug-demo: config: reading config parameter "region"

Option region.

Choose national cloud region for OneDrive.

Choose a number from below, or type in your own value of type string.

Press Enter for the default (global).

1 / Microsoft Cloud Global

\ (global)

2 / Microsoft Cloud for US Government

\ (us)

3 / Microsoft Cloud Germany (deprecated - try global region first).

\ (de)

4 / Azure and Office 365 operated by Vnet Group in China

\ (cn)

region>

2026/05/10 18:28:04 DEBUG : apcug-demo: config in: state="*all-set,6,false", result="global"

2026/05/10 18:28:04 DEBUG : apcug-demo: config out: out=&{State:*all,7,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:04 DEBUG : apcug-demo: config in: state="*all,7,false", result=""

2026/05/10 18:28:04 DEBUG : apcug-demo: config out: out=&{State:*all,8,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:04 DEBUG : apcug-demo: config in: state="*all,8,false", result=""

2026/05/10 18:28:04 DEBUG : apcug-demo: config out: out=&{State:*all,9,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:04 DEBUG : apcug-demo: config in: state="*all,9,false", result=""

2026/05/10 18:28:04 DEBUG : apcug-demo: config out: out=&{State:*all,10,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:04 DEBUG : apcug-demo: config in: state="*all,10,false", result=""

2026/05/10 18:28:04 DEBUG : apcug-demo: config out: out=&{State:*all,11,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:04 DEBUG : apcug-demo: config in: state="*all,11,false", result=""

2026/05/10 18:28:04 DEBUG : apcug-demo: config out: out=&{State:*all,12,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:04 DEBUG : apcug-demo: config in: state="*all,12,false", result=""

2026/05/10 18:28:04 DEBUG : apcug-demo: config out: out=&{State:*all,13,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:04 DEBUG : apcug-demo: config in: state="*all,13,false", result=""

2026/05/10 18:28:04 DEBUG : apcug-demo: config out: out=&{State:*all-set,13,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:04 DEBUG : apcug-demo: config: reading config parameter "tenant"

Option tenant.

ID of the service principal's tenant. Also called its directory ID.

Set this if using

  • Client Credential flow

Enter a value. Press Enter to leave empty.

tenant>

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all-set,13,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,14,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,14,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,15,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,15,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,16,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,16,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,17,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,17,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,18,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,18,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,19,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,19,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,20,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,20,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,21,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,21,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,22,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,22,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,23,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,23,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,24,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,24,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,25,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,25,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,26,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,26,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,27,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,27,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,28,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,28,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all,29,false Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config in: state="*all,29,false", result=""

2026/05/10 18:28:05 DEBUG : apcug-demo: config out: out=&{State:*all-advanced Option:false OAuth: Error: Result:}, err=

2026/05/10 18:28:05 DEBUG : apcug-demo: config: reading config parameter "config_fs_advanced"

Edit advanced config?

y) Yes

n) No (default)

y/n>

2026/05/10 18:28:07 DEBUG : apcug-demo: config in: state="*all-advanced", result="false"

2026/05/10 18:28:07 DEBUG : apcug-demo: config out: out=&{State:*postconfig Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:07 DEBUG : apcug-demo: config in: state="*postconfig", result=""

2026/05/10 18:28:07 DEBUG : apcug-demo: config in: state="", result=""

2026/05/10 18:28:07 DEBUG : apcug-demo: config out: out=&{State:*oauth,choose_type,, Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:07 DEBUG : apcug-demo: config out: out=&{State:*oauth,choose_type,, Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:07 DEBUG : apcug-demo: config in: state="*oauth,choose_type,,", result=""

2026/05/10 18:28:07 DEBUG : apcug-demo: config out: out=&{State:*oauth-confirm,choose_type,, Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:07 DEBUG : apcug-demo: config in: state="*oauth-confirm,choose_type,,", result=""

2026/05/10 18:28:07 DEBUG : apcug-demo: config out: out=&{State:*oauth-islocal,choose_type,, Option:true OAuth: Error: Result:}, err=

2026/05/10 18:28:07 DEBUG : apcug-demo: config: reading config parameter "config_is_local"

Use web browser to automatically authenticate rclone with remote?

  • Say Y if the machine running rclone has a web browser you can use

  • Say N if running rclone on a (remote) machine without web browser access

If not sure try Y. If Y failed, try N.

y) Yes (default)

n) No

y/n>

2026/05/10 18:28:10 DEBUG : apcug-demo: config in: state="*oauth-islocal,choose_type,,", result="true"

2026/05/10 18:28:10 DEBUG : apcug-demo: config out: out=&{State:*oauth-do,choose_type,, Option: OAuth: Error: Result:}, err=

2026/05/10 18:28:10 DEBUG : apcug-demo: config in: state="*oauth-do,choose_type,,", result=""

2026/05/10 18:28:10 NOTICE: Make sure your Redirect URL is set to "http://localhost:53682/" in your custom config.

2026/05/10 18:28:10 DEBUG : Starting auth server on 127.0.0.1:53682

2026/05/10 18:28:10 DEBUG : apcug-demo: config out: out=, err=config failed to refresh token: failed to start auth webserver: listen tcp 127.0.0.1:53682: bind: An attempt was made to access a socket in a way forbidden by its access permissions.

Error: config failed to refresh token: failed to start auth webserver: listen tcp 127.0.0.1:53682: bind: An attempt was made to access a socket in a way forbidden by its access permissions.

Usage:

rclone config [flags]

rclone config [command]

Available commands:

create Create a new remote with name, type and options.

delete Delete an existing remote.

disconnect Disconnects user from remote

dump Dump the config file as JSON.

edit Enter an interactive configuration session.

encryption set, remove and check the encryption for the config file

file Show path of configuration file in use.

password Update password in an existing remote.

paths Show paths used for configuration, cache, temp etc.

providers List in JSON format all the providers and options.

reconnect Re-authenticates user with remote.

redacted Print redacted (decrypted) config file, or the redacted config for a single remote.

show Print (decrypted) config file, or the config for a single remote.

string Print connection string for a single remote.

touch Ensure configuration file exists.

update Update options in an existing remote.

userinfo Prints info about logged in user of remote.

Flags:

-h, --help help for config

Use "rclone [command] --help" for more information about a command.

Use "rclone help flags" for to see the global flags.

Use "rclone help backends" for a list of supported services.

2026/05/10 18:28:10 NOTICE: Fatal error: config failed to refresh token: failed to start auth webserver: listen tcp 127.0.0.1:53682: bind: An attempt was made to access a socket in a way forbidden by its access permissions.

I don't mind using git to recompile if there's a way to hardcode the number to a different number is that possible?

Well, Claude AI is helping me recompile the software. I found the file where the port number is hard coded and I changed it now I'm about to recompile.

I recompiled the software and change the default port to 6300.

Authorization on that Port is working normally.

Message to Developers.

The default Port that you're using is being occupied by Microsoft virtual machine hyper-v software or perhaps windows subsystem for Linux one of those two is causing the problem.

If you could make a command line flag that would allow you to manually change the port that it uses to launch the web port for the browser for authorization of OneDrive for example that would be a great Improvement.

I guess from now on every time I download a new version of rclone I'm going to have to recompile it. Sucks but such is life.

I am not against your idea to make this port configurable.

In the meantime wouldn’t be easier to use another authentication method?

There are multiple options here:

Hi and thanks for the link.

Here is my problem. I only have two computers and they are both running Windows 11 Pro with Microsoft virtual machine hyper-v software installed. According to every AI I have researched with, hyperv is reserving the port rclone requires for oauth.

When I run this command it lists all of the port ranges that are excluded from use. 53682 is amongst them. Rclone bombs out to cmd prompt when I try to authenticate.

netsh int ipv4 show excludedportrange protocol=tcp

I do not own a computer that has Port 53682 available to do the Authentication.

Headless or not rclone can never use the port that is hard coded into the rclone software.

I have spent hours working on this and I've tried all of the options. I do not want to continue doing what I have been which is running a Linux virtual machine or a Windows Virtual Machine either one and configure the remote there and then copy the text to my real rclone configuration file.

I do public presentations to large audiences over Zoom demonstrating rclone, the various gui's, and Kopia backup which in some cases requires rclone. It's no fun teaching a general audience how to use one of the workarounds like authenticating on a second machine and then transferring the contents of the config file to the other machine. It's not a clean way to do a demonstration.

The ideal solution is a command line flag that lets the user change the port rather than it being hard coded into the app.

Perhaps there are not many developers or any Developers of rclone that have a Windows machine running Pro and the Microsoft virtual machine environment.

netsh int ipv4 show excludedportrange protocol=tcp

Hyper-V (specifically via the Windows NAT Driver, or winnat) frequently reserves large blocks of ports in the high dynamic range, and 53682 falls directly within the default range it targets (49152 to 65535).Because these reservations are often randomized upon reboot, port 53682 might be available one day and "Access Denied" the next.How to Verify. You can check exactly which port ranges are currently reserved by Hyper-V/Windows by running this command in PowerShell or Command Prompt:PowerShell

netsh interface ipv4 show excludedportrange protocol=tcp

Look for a range that encompasses 53682. If it appears in that list without an asterisk (which denotes an "Administered" exclusion you set yourself), Hyper-V has likely claimed it.��

It’s not quite that simple.

Many of the oAuth authentications require a redirect URI to auth and that’s the port that was picked so it’s in a lot of places to ‘work’.

Best bet would be to submit a request and see about potentially changing the port, but that has a lot of implication as it would break older versions from doing oAuth on certain providers like Google Drive as an example.

My proposal/wish is not anything that perminently changes the default protocol rclone uses. No other users or installations will be negatively impacted in any way whatsoever.

I would merely like for the developers to add a command line flag like there are many many other flags that allow you to do things as simple as change the default location for where the configuration file is located.

For example:

Rclone config --auth-port 6300

This should be a very simple addition to the product that won't affect anybody at all that doesn't need it.

The AI engine Claude claims that it has the ability to adapt the source code so that when I compile it, it will accept a new command line flag that changes the port temporarily.

This is my current plan of action to provide a solution for my situation. If Claude is successful in assisting me in doing this I will provide the developers with the updated code so they can look at it and see if they want to integrate it into rclone.

Changing to that port would mean that you can’t auth Google Drive for example because the redirect URI would be wrong. Any providers that have Redirect URIs would be impacted.

Hi,

I have to disagree that Google will fail to properly authenticate.

After I read your comment I used my newly compiled rclone.exe on Port 6300 and it properly opened my browser and took me to Google where I authenticated and got my token and created the remote and I can use it.

I did Microsoft OneDrive yesterday.

Specifically I said anything with a redirect URI / oAuth flow will fail.

Examples → Dropbox

See the port there as “53682”. I used Google as an example as I thought it had a redirect URI, but if it doesn’t, it will work.

Use Claude and ask about Redirect UIs and it’ll explain it in more detail.

in windows you can stop winnat and then run auth as normal (as admin or with sudo if you have that)

net stop winnat

this will release the ports so you can run your auth.

then start it back up so wsl works regularly:

net start winnat

done.

Thanks I'll give that a try.

I do have an rclone.exe that uses Port 6001 successfully so far with Google and Microsoft.

Claude modified the file that changed the port to 6001 and then I recompiled creating a new rclone.exe.