Skip to main content

Login Credentials

The default WebAdmin account is usually admin. You set or reset the password with the built-in helper.

sudo /usr/local/lsws/admin/misc/admpass.sh

What the helper does​

This helper updates the WebAdmin login credential for the admin interface. It is one of the first commands you should run on a fresh installation.

What a safe credential process looks like​

On a new server, the sequence should usually be:

  1. install OpenLiteSpeed
  2. restrict access to 7080
  3. set the admin password
  4. verify login
  5. record credential handling policy in your admin notes or secret store

Best practice​

  • Use a strong unique password
  • Restrict network access to WebAdmin
  • Document credential handling in your server runbook

You should also make sure the password is stored somewhere appropriate for your team, not in random shell history notes or unsecured text files.

Common mistake​

Some administrators set a strong password but leave port 7080 open globally. That is still weak operational security because it invites constant exposure of a privileged service.

Another common mistake is forgetting who changed the credential last or where the credential is documented. Administrative confusion becomes an outage risk when urgent access is needed.

Recovery mindset​

If access is lost, the password helper is part of your recovery path. That is another reason the underlying server shell access is still important even when WebAdmin is your normal interface.

Key takeaway​

Treat WebAdmin credentials like root-adjacent access because configuration mistakes here can affect every hosted site.