Remove Default Usernames/Passwords Included With XAMPP

July 26th, 2007

This article is part of a series of articles about making XAMPP more secure. See the overview page for all the security measures.

By default, XAMPP has passwords for some of its included features, such as the FTP server, WebDav server, and some of the web accessible folders. These default passwords are well known and are documented in the c:\xampp\readme_en.txt file. If you don’t change these default passwords, it is easy for anyone with this knowledge to access your server.

The following links show how to change some of the default passwords:

  1. Remove the default FTP usernames/passwords.
  2. Change the FTP server administration password.

Articles will be written in the future on how to remove the other default passwords in XMAPP.

Next Step

The next step for this tutorial is to encrypt the transmission of passwords.


  1. Chetanon 19 May 2008 at 3:00 am

    Whats XAMPP Default password ??

  2. nenchon 13 Feb 2009 at 1:55 am

    xampp dont have a password as default.

  3. arthur halik razakon 15 Mar 2009 at 9:18 am

    how to change username and password from filezilla server?

  4. sheinepoon 25 Apr 2013 at 7:21 am

    I would like to know how to remove the xampp password.
    I have create a admin

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.