qbittorrent-nox is the headless qBittorrent package. It runs without an X or Wayland session and provides the WebUI, making it the right package for a home server, NAS, seedbox-style host, or remote Debian machine you manage through a browser.
Install the qBittorrent-nox Package
Install qbittorrent-nox from Debian’s repositories:
>_
Terminal command
sudo apt update
sudo apt install qbittorrent-nox
Verify the installed headless binary. The example uses Debian 13’s default package:
>_
Terminal command
qbittorrent-nox --version
qBittorrent v5.1.0
A dedicated system user keeps qBittorrent configuration, session data, and default download paths separate from your personal login account. Create the account with a real home directory so the WebUI can write its configuration under /var/lib/qbittorrent:
>_ sudo adduser --system --group --home /var/lib/qbittorrent qbittorrent
The --system option creates a locked service account, --group creates a matching group, and --home avoids the Debian system-user default of /nonexistent. If you store completed downloads on another disk, create that directory separately and give the qbittorrent user access to it.
Debian 12 and Debian 13 include the templated service file qbittorrent-nox@.service.
The default WebUI listener binds to all network interfaces. Before starting the service, ensure your existing firewall and network policy restrict TCP port 8080 to trusted devices on both IPv4 and IPv6. Debian 12 starts with a known default password. Keep that restriction when using an SSH tunnel; the tunnel does not block direct connections.
Enable and start an instance for the dedicated service user:
>_ sudo systemctl enable --now qbittorrent-nox@qbittorrent
Confirm systemd reports the instance as active:
>_ systemctl is-active qbittorrent-nox@qbittorrent
active
Confirm that the WebUI is listening on TCP port 8080 and that the process is qbittorrent-nox. Process IDs and spacing vary:
>_ sudo ss -tlnp 'sport = :8080'
LISTEN 0 50 *:8080 *:* users:(("qbittorrent-nox",pid=100995,fd=44))
From the Debian machine itself, open http://localhost:8080. From another device on your LAN, replace the host with the server’s local address, such as http://192.168.1.50:8080.
The default WebUI username is admin.
Temporary WebUI Password
Debian 13 packages qBittorrent 5.1.0, which follows the newer upstream behavior. If no permanent password exists yet, qBittorrent writes a temporary admin password to the service log at startup. Read the latest matching line; the example redacts the generated password.
>_ sudo journalctl -u qbittorrent-nox@qbittorrent -b --no-pager -o cat | grep -i "temporary password" | tail -n 1
The WebUI administrator password was not set. A temporary password is provided for this session: [password]
Use the temporary password only for the first login. Save permanent credentials under Tools > Options > Web UI > Authentication; otherwise a service restart can generate a different temporary password.
qBittorrent WebUI login page on Debian Linux
Leave automatic router port forwarding for the WebUI disabled. This control is separate from torrent peer-port forwarding. LAN access or an SSH tunnel does not need an automatic router mapping for WebUI port 8080.
After saving the credentials, set the default save path to a directory writable by the qbittorrent service account. The default download and session data stay under /var/lib/qbittorrent; a path in your personal home directory may be inaccessible to this account. Add a torrent or magnet link from a source you trust, confirm the chosen save path, and check that the transfer appears in the WebUI. An idle transfer without peers does not by itself mean the service is broken.