CrushFTP CrushFTP File Transfer Server (Docker) — Default Password
Default username and password for the CrushFTP CrushFTP File Transfer Server (Docker): crushadmin / crushadmin. Learn how to log in and how to change the default credentials.
CrushFTP Docker deployments (official and community images) default to username 'crushadmin' and password 'crushadmin' unless explicitly overridden via environment variables. Active exploitation of these default credentials has been observed (SANS ISC, March 2026). Change admin username and password before exposing to any network.
| Username | Password | Access | Version / firmware | Notes |
|---|---|---|---|---|
crushadmin | crushadmin | Web UI | Docker | — |
Responsible use
This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.