Rapid7 Nexpose / InsightVM Security Console (Virtual Appliance) — Default Password
Default username and password for the Rapid7 Nexpose / InsightVM Security Console (Virtual Appliance): nxadmin / nxpassword. Learn how to log in and how to change the default credentials.
Two credential contexts: (1) OS/terminal login to the virtual appliance uses nexpose/nexpose; (2) the Security Console web UI (https://<IP>:3780) uses nxadmin/nxpassword. Documentation explicitly advises changing both immediately. Non-appliance bare-metal installs require credentials set during the installation wizard.
| Username | Password | Access | Notes |
|---|---|---|---|
nxadmin | nxpassword | Web UI | Security Console, port 3780 |
nexpose | nexpose | Console | Virtual appliance OS terminal |
Responsible use
This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.