Skip to content
Server & Web Software

Apache Software Foundation Apache Tomcat Web Application Server — Default Password

Default username and password for the Apache Software Foundation Apache Tomcat Web Application Server: tomcat / tomcat. Learn how to log in and how to change the default credentials.

Tomcat ships with no users in tomcat-users.xml by default; the Manager and Host Manager apps are also disabled. The Windows installer creates an 'admin' account with a blank password if not changed during setup. Many deployments copy the sample tomcat-users.xml which shows 'tomcat'/'tomcat' as example credentials.

UsernamePasswordAccessNotes
tomcat
tomcat
Web UICommon credential found in copied sample tomcat-users.xml configurations. Used for Manager and Host Manager web apps.
admin
(blank / none)
Web UIWindows installer default: 'admin' with blank password if unchanged during installation.

Responsible use

This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.

Related devices