HashiCorp (IBM) Consul Service Mesh & Service Discovery — Default Password
Default username and password for the HashiCorp (IBM) Consul Service Mesh & Service Discovery: (blank) / (blank). Learn how to log in and how to change the default credentials.
HashiCorp Consul ships with the ACL (Access Control List) system disabled by default. Without ACLs, the HTTP API on port 8500 accepts all requests without any token or credential, allowing unauthenticated reads and writes to the key-value store, service registry, and cluster configuration. In -dev mode the Web UI is also auto-enabled with no authentication. The official HashiCorp security docs warn that ACLs must be explicitly bootstrapped and enabled in production. Applies to Consul open-source across all pre-ACL-default versions.
| Username | Password | Access | Notes |
|---|---|---|---|
(blank / none) | (blank / none) | API | HTTP API on port 8500 and Web UI unauthenticated. ACL system must be explicitly bootstrapped and enabled via consul acl bootstrap. |
Responsible use
This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.