Besides serving static files through django is considered a bad idea, the django admin itself is pretty safe . You can take additional measure by securing it via . htaccess and force https access on it. You could also restrict access to a certain IP.