diff --git a/router/admin.py b/router/admin.py
new file mode 100644
index 00000000..4837e18d
--- /dev/null
+++ b/router/admin.py
@@ -0,0 +1,92 @@
+import os
+from fastapi import APIRouter, Request
+from fastapi.responses import HTMLResponse
+
+admin_router = APIRouter(prefix="/admin")
+
+
+def login_form() -> str:
+    return """<!DOCTYPE html>
+    <html>
+        <head>
+            <style>
+                body {
+                    font-family: Arial, sans-serif;
+                    display: flex;
+                    justify-content: center;
+                    align-items: center;
+                    height: 100vh;
+                    margin: 0;
+                }
+                form {
+                    display: flex;
+                    flex-direction: column;
+                    gap: 10px;
+                }
+                input[type="password"] {
+                    padding: 8px;
+                }
+                button {
+                    padding: 8px;
+                    cursor: pointer;
+                }
+            </style>
+            <script>
+                function handleSubmit(e) {
+                    e.preventDefault();
+                    const password = document.getElementById('password').value;
+                    document.cookie = `admin_password=${password}; path=/; max-age=86400`;
+                    window.location.reload();
+                }
+            </script>
+        </head>
+        <body>
+            <form onsubmit="handleSubmit(event)">
+                <input type="password" id="password" placeholder="Admin Password" required>
+                <button type="submit">Login</button>
+            </form>
+        </body>
+    </html>
+    """
+
+
+def info(content: str) -> str:
+    return f"""<!DOCTYPE html>
+    <html>
+        <head>
+            <style>
+                body {{
+                    font-family: Arial, sans-serif;
+                    display: flex;
+                    justify-content: center;
+                    align-items: center;
+                    height: 100vh;
+                    margin: 0;
+                }}
+            </style>
+        </head>
+        <body>
+            <div style="text-align: center;">
+                {content}
+            </div>
+        </body>
+    </html>
+    """
+
+def admin_auth() -> str:
+    if os.getenv("ADMIN_PASSWORD", "") == "":
+        return info("Please set a secure ADMIN_PASSWORD= in your ENV variables.")
+    else:
+        return login_form()
+
+
+def dashboard(request: Request) -> str:
+    return info("Admin dashboard")
+
+
+@admin_router.get("/", response_class=HTMLResponse)
+async def admin(request: Request):
+    admin_cookie = request.cookies.get("admin_password")
+    if admin_cookie and admin_cookie == os.getenv("ADMIN_PASSWORD"):
+        return dashboard(request)
+    return admin_auth()
diff --git a/router/main.py b/router/main.py
index e6d10352..7ae8e71d 100644
--- a/router/main.py
+++ b/router/main.py
@@ -4,6 +4,7 @@ from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware
 
 from .db import init_db
+from .admin import admin_router
 from .proxy import proxy_router
 from .account import account_router
 from .cashu import _initialize_wallet
@@ -42,6 +43,7 @@ async def info():
     }
 
 
+app.include_router(admin_router)
 app.include_router(account_router)
 app.include_router(proxy_router)