diff --git a/js/accessControl.js b/js/accessControl.js
index d0bc9de3..901e94e1 100644
--- a/js/accessControl.js
+++ b/js/accessControl.js
@@ -796,10 +796,17 @@ class AccessControl {
     // Bypass lockdown in test mode
     if (typeof window !== "undefined") {
       try {
+        const hostname = window.location.hostname;
+        const isLocal =
+          hostname === "localhost" ||
+          hostname === "127.0.0.1" ||
+          hostname === "[::1]";
         const params = new URLSearchParams(window.location.search);
+
         if (
-          params.get("__test__") === "1" ||
-          localStorage.getItem("__bitvidTestMode__") === "1"
+          isLocal &&
+          (params.get("__test__") === "1" ||
+            localStorage.getItem("__bitvidTestMode__") === "1")
         ) {
           return false;
         }
diff --git a/js/services/authService.js b/js/services/authService.js
index 1a7326ab..dec5c086 100644
--- a/js/services/authService.js
+++ b/js/services/authService.js
@@ -423,8 +423,30 @@ export default class AuthService {
   }
 
   _checkAccessControl(nextPubkey, trimmedPubkey) {
-    const control = this.accessControl;
     const candidateNpub = this.safeEncodeNpub(nextPubkey) || null;
+
+    if (typeof window !== "undefined") {
+      try {
+        const hostname = window.location.hostname;
+        const isLocal =
+          hostname === "localhost" ||
+          hostname === "127.0.0.1" ||
+          hostname === "[::1]";
+        const params = new URLSearchParams(window.location.search);
+
+        if (
+          isLocal &&
+          (params.get("__test__") === "1" ||
+            window.localStorage.getItem("__bitvidTestMode__") === "1")
+        ) {
+          return { candidateNpub };
+        }
+      } catch (error) {
+        // ignore
+      }
+    }
+
+    const control = this.accessControl;
     let lockdownActive = false;
 
     if (control && typeof control.isLockdownActive === "function") {
diff --git a/scripts/check-file-size.mjs b/scripts/check-file-size.mjs
index bc1c64db..00c197d7 100644
--- a/scripts/check-file-size.mjs
+++ b/scripts/check-file-size.mjs
@@ -59,7 +59,7 @@ const GRANDFATHERED = {
   "js/ui/components/UploadModal.js": 1319,
   "js/ui/components/SimilarContentCard.js": 1303,
   "js/services/playbackService.js": 1289,
-  "js/services/authService.js": 1276,
+  "js/services/authService.js": 1335,
   "js/ui/zapController.js": 1206,
   "js/services/r2Service.js": 1194,
   "js/ui/applicationBootstrap.js": 1163,