The Admin page includes a security warning surface for default credentials. This is one of the quickest checks to review after installation, migration, or a handoff from another operator.
When to Use This
- You want to harden a fresh install.
- You took over a panel from someone else.
- You want to check for obvious credential risk during routine maintenance.
- You are preparing the panel for client or staff use.
Steps
- Open Admin.
- Look for the default-credentials warning area.
- If a warning is shown, treat it as a real security problem rather than a cosmetic notice.
- Go to Settings and change the affected account credentials.
- Return to Admin and confirm the warning no longer applies.
Expected Result
After changing the risky credentials, the panel should no longer be operating with default login values.
Why This Matters
Default credentials are one of the highest-value easy targets. Cockpit surfaces them because the correct response is to fix them immediately, not later.
Common Mistakes
- Ignoring the warning because the panel is private: Private access does not make default credentials safe.
- Changing only one field: Review the whole credential state, not just one visible value.
- Not retesting login: Verify the new credentials work before ending the session.
Example Use Cases
- Fresh install hardening: The owner checks Admin and immediately rotates any default account values.
- Post-handoff cleanup: A reseller takes over an older panel and uses the warning area as a starting point for security cleanup.
- Routine maintenance: The operator includes this warning check in a regular admin review checklist.
Related Articles
- How to Change Account Details
- How to Set Up 2FA
- How to Review System Health Checks