Should default passwords always be empty?

Posted by mafutrct on Stack Overflow See other posts from Stack Overflow or by mafutrct
Published on 2010-04-23T16:17:19Z Indexed on 2010/04/23 16:23 UTC
Read the original article Hit count: 184

Filed under:
|

I'm currently designing a system that requires an admin to log in using a password. For certain reasons, it is difficult to set this password during installation, but it can be changed later.

My idea is this: If I leave the default password empty, it is so horridly insecure that every admin is going to fix this as soon as possible. If I were to use some kind of predefined password instead, admins may think "ah.. nobody would think I've got 'defaultpassword' as my password so it's not very important to change."

So the basic thought is to make it so terrible that even the most lazy people are going to do something about it.

© Stack Overflow or respective owner

Related posts about security

Related posts about passwords