diff --git a/web/src/lib/util/authorization_util.ts b/web/src/lib/util/authorization_util.ts
index 22044430..c2dac70f 100644
--- a/web/src/lib/util/authorization_util.ts
+++ b/web/src/lib/util/authorization_util.ts
@@ -1,7 +1,8 @@
 const privateRoutes = [
   "/settings",
   "/trail/edit/new",
-  "/profile"
+  "/profile",
+  "/lists/edit/new",
 ]
 
 export function isRouteProtected(path: string) {
diff --git a/web/src/routes/lists/+page.svelte b/web/src/routes/lists/+page.svelte
index 93e7b80c..df366712 100644
--- a/web/src/routes/lists/+page.svelte
+++ b/web/src/routes/lists/+page.svelte
@@ -259,12 +259,14 @@
                 onclick={() => (filterExpanded = !filterExpanded)}
                 ><i class="fa fa-sliders"></i></button
             >
+            {#if $currentUser}
             <a
                 aria-label="New list"
                 class="btn-primary tooltip"
                 data-title={$_("new-list")}
                 href="/lists/edit/new"><i class="fa fa-plus"></i></a
             >
+            {/if}
         </div>
         {#if filterExpanded}
             <div
@@ -273,7 +275,7 @@
                 out:slide
             >
                 <p class="text-sm font-medium pb-1">{$_("sort")}</p>
-                <div class="flex items-center gap-2">
+                <div class="flex items-center gap-2" class:mb-6={!$currentUser}>
                     <Select
                         bind:value={filter.sort}
                         items={sortOptions}