Apache Software Foundation Apache Karaf — Default Password
Default username and password for the Apache Software Foundation Apache Karaf: karaf / karaf. Learn how to log in and how to change the default credentials.
Every Apache Karaf distribution ships an etc/users.properties file that defines 'karaf = karaf,_g_:admingroup', giving the karaf user full admin-group membership. The same credential is valid for the Felix WebConsole (port 8181), SSH remote shell (port 8101), and the JMX management layer. An 'admin' alias pointing to the same credential also exists in some builds. Applies to Karaf 3.x and 4.x. The Rapid7 Metasploit module auxiliary/scanner/ssh/apache_karaf_command_execution targets this default.
| Username | Password | Access | Notes |
|---|---|---|---|
karaf | karaf | Web UI | Felix WebConsole on port 8181. Same credential used for SSH (port 8101) and JMX. |
karaf | karaf | SSH | SSH remote shell on port 8101. |
- Source
- vendor documentation
Responsible use
This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.
Related devices
admin/adminWeb UI∅/∅Web UI∅/∅APIcassandra/cassandraDatabase∅/∅APItomcat/tomcatWeb UI