OpenJS Foundation (IBM) Node-RED Flow-Based Programming Tool — Default Password
Default username and password for the OpenJS Foundation (IBM) Node-RED Flow-Based Programming Tool: (blank) / (blank). Learn how to log in and how to change the default credentials.
Node-RED is a widely-deployed flow-based programming tool for IoT and automation, originally developed by IBM and now hosted by the OpenJS Foundation. By default, Node-RED runs with NO authentication whatsoever — the editor and all admin APIs are fully open to anyone with network access on port 1880. Authentication must be explicitly configured in settings.js using bcrypt-hashed passwords. The Node-RED documentation explicitly warns that 'by default, the editor is not secured — anyone who can access its IP address can access the editor and deploy changes.' This is a well-known and frequently exploited security gap on exposed installations.
| Benutzername | Passwort | Zugriff | Version / Firmware | Hinweise |
|---|---|---|---|---|
(leer / keine) | (leer / keine) | Web UI | All versions (authentication off by default) | Node-RED editor at http://<host>:1880/ is fully open with no login required. Admin API also unauthenticated. Requires manual configuration in settings.js to enable auth. |
Verantwortungsvolle Nutzung
Diese Datenbank listet öffentlich dokumentierte Standard-Zugangsdaten auf, damit Administratoren sie finden und ändern können. Verwenden Sie sie nur auf Systemen, die Ihnen gehören oder die Sie testen dürfen.
Verwandte Geräte
admin/pfsenseWeb UIadmin/adminWeb UIadmin/∅Web UIadmin/adminWeb UIadmin/adminWeb UIadmin/radiusWeb UI