HashiCorp Nomad Cluster Orchestrator (Community / Enterprise) — Default Password
Default username and password for the HashiCorp Nomad Cluster Orchestrator (Community / Enterprise): (blank) / (blank). Learn how to log in and how to change the default credentials.
HashiCorp Nomad's ACL (Access Control List) system is disabled by default. Without ACLs bootstrapped, the Nomad HTTP API on port 4646 requires no authentication — any client can submit jobs, cancel allocations, read task secrets, access exec endpoints, and enumerate the cluster. HashiCorp's official security documentation explicitly states this and recommends bootstrapping ACLs before production deployment. Affects all Nomad versions unless 'acl { enabled = true }' is set in the server configuration.
| Username | Password | Access | Notes |
|---|---|---|---|
(blank / none) | (blank / none) | API | ACL system disabled by default; HTTP API port 4646 is fully open without authentication |
Responsible use
This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.