Privoxy’s SOCKS5 forwarding rule supports an upstream username and password. A local configuration fragment can be:

listen-address 127.0.0.1:8118
forward-socks5 / proxy-user:[email protected]:1080 .

The credential values are placeholders. They authenticate Privoxy to the SOCKS5 parent. The final dot means no additional HTTP parent beyond that SOCKS connection.

Configure the application with an HTTP proxy at 127.0.0.1:8118, not with the authenticated SOCKS endpoint. Privoxy handles the upstream SOCKS handshake on the application’s behalf.

This does not require every client to implement SOCKS5 authentication. It also does not give the local HTTP listener those same authentication requirements. Verify the listener’s access boundary for its intended clients, and manage the parent credentials in Privoxy’s protected configuration.

Artiglyn mynjee