Default credentials
The factory username and password a device or application ships with, unchanged after installation.
Every model's defaults are published in the manual and collected in searchable lists. Firewalls, cameras, printers, network devices, and management interfaces are all found this way routinely.
It is among the most common findings in internal testing, usually on equipment installed years ago by someone who has since left.
Where this comes up
Default credentials sits inside our penetration testing work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.
Related terms
Exposed service A system or application reachable from the internet that should not be, or should not be reachable without authentication. Enumeration Systematically listing what exists on a target: services, users, shares, and configurations. Misconfiguration A system that is insecure because of how it was set up, rather than because of a flaw in the software. Password policy The rules governing password length, complexity, reuse, and expiry.