Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#2744 - Force initial password change #7549

Open
openwrt-bot opened this issue Jan 17, 2020 · 0 comments
Open

FS#2744 - Force initial password change #7549

openwrt-bot opened this issue Jan 17, 2020 · 0 comments
Labels

Comments

@openwrt-bot
Copy link

NiQ1:

By default OpenWRT is accessed with user root and empty password. Allowing access with default credentials is a security concern.
Please consider forcing a password change when OpenWRT is first installed (or restored to default settings). SSH access should automatically run passwd and not allow access to shell until a password is set and likewise LuCi should automatically pop a password change page and disable access to all other pages until a password is set.

Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant