Should default passwords always be empty?
Posted
by mafutrct
on Stack Overflow
See other posts from Stack Overflow
or by mafutrct
Published on 2010-04-23T16:17:19Z
Indexed on
2010/04/23
16:23 UTC
Read the original article
Hit count: 188
I'm currently designing a system that requires an admin to log in using a password. For certain reasons, it is difficult to set this password during installation, but it can be changed later.
My idea is this: If I leave the default password empty, it is so horridly insecure that every admin is going to fix this as soon as possible. If I were to use some kind of predefined password instead, admins may think "ah.. nobody would think I've got 'defaultpassword' as my password so it's not very important to change."
So the basic thought is to make it so terrible that even the most lazy people are going to do something about it.
© Stack Overflow or respective owner