Skip to content
Server & Web Software

DVWA Project (digininja) DVWA (Damn Vulnerable Web Application) — Default Password

Default username and password for the DVWA Project (digininja) DVWA (Damn Vulnerable Web Application): admin / password. Learn how to log in and how to change the default credentials.

Intentionally weak default credentials for security training. admin/password is the default web login. Additional seeded accounts: gordon/abc123, pablo/letmein, smithy/password. Must NOT be deployed on public internet.

UsernamePasswordAccessNotes
admin
password
Web UI—

Responsible use

This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.

Related devices