Remove Default Usernames/Passwords Included With XAMPP

This article is part of a series of articles about making XAMPP more secure. See the overview page for all the security measures.

By default, XAMPP has passwords for some of its included features, such as the FTP server, WebDav server, and some of the web accessible folders. These default passwords are well known and are documented in the c:\xampp\readme_en.txt file. If you don’t change these default passwords, it is easy for anyone with this knowledge to access your server.

The following links show how to change some of the default passwords:

1. Remove the default FTP usernames/passwords.
2. Change the FTP server administration password.

Articles will be written in the future on how to remove the other default passwords in XMAPP.

Next Step

The next step for this tutorial is to encrypt the transmission of passwords.