Implementing basic security

The web interface shown at http://localhost:8080/geoserver/web requires you to log in. You can use the default values of admin as username and geoserver as the password. Now you are on the administration console of GeoServer and can change any setting:

We will explore this interface in the next chapter, but we are sure you are wondering if a default password is a good idea for this console. Indeed it is not, and you should change it as soon as possible. We will cover many other security topics in detail in Chapter 10, Securing GeoServer Before Production.