Allow changing password for default admin@admin.com user before first start #4136

New Issue

OVERLORD · 2026-02-05T08:10:16+03:00

OVERLORD commented

2026-02-05 08:10:16 +03:00

Originally created by @e-g1gor on GitHub (Sep 5, 2023).

Describe the feature you'd like

Initial password for default admin should be configurable somehow, maybe via .env file, like

DEFAULT_ADMIN_PASSWORD=xxx

Describe the benefits this would bring to existing BookStack users

There is default migration, that creates admin user with easily brutable credentials.
It allows to easily bruteforce admin access to newly deployed services - for as long as someone do not change password manually.

If this service is being deployed to domain that attracted attention of hackers - they may perform atack immediately, before default password will be changed.

Can the goal of this request already be achieved via other means?

By tweaking original migration - ad60517536/database/migrations/2014_10_12_000000_create_users_table.php (L28)

Have you searched for an existing open/closed issue?

I have searched for existing issues and none cover my fundemental request

How long have you been using BookStack?

Not using yet, just scoping

Additional context

No response

Originally created by @e-g1gor on GitHub (Sep 5, 2023). ### Describe the feature you'd like Initial password for default admin should be configurable somehow, maybe via .env file, like `DEFAULT_ADMIN_PASSWORD=xxx` ### Describe the benefits this would bring to existing BookStack users There is default migration, that creates admin user with easily brutable credentials. It allows to easily bruteforce admin access to newly deployed services - for as long as someone do not change password manually. If this service is being deployed to domain that attracted attention of hackers - they may perform atack immediately, before default password will be changed. ### Can the goal of this request already be achieved via other means? By tweaking original migration - https://github.com/BookStackApp/BookStack/blob/ad60517536918a81c14e001967f005e761a31e6b/database/migrations/2014_10_12_000000_create_users_table.php#L28 ### Have you searched for an existing open/closed issue? - [X] I have searched for existing issues and none cover my fundemental request ### How long have you been using BookStack? Not using yet, just scoping ### Additional context _No response_

OVERLORD added the 🔨 Feature Request label 2026-02-05 08:10:16 +03:00

OVERLORD closed this issue

2026-02-05 08:10:20 +03:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#4136