#515 ADMIN_INITIAL_PASSWORD stays in plain text after the first start

[Anonymous]

Originally created by: athanclark

ADMIN_INITIAL_PASSWORD stays in plaintext after bootstrap.

• Location: openchronology.env:36-41, reset-admin-password.mjs:27-31. This is by design, for the reset tool.
• Compose passes it into the migrate container's environment (compose.yml:41), where anyone who can run docker inspect can see it; that is root-equivalent anyway.
• Suggest telling operators to blank it after the first sign-in. Bootstrap correctly refuses to promote an existing account (server/administration.mjs:87-97).

---

From the security review of 2026-11-06 (commit 6776c44), finding I-14: hardening or information, filed publicly because it describes no way in. The exploitable findings are private security advisories.

🤖 Generated with Claude Code

https://claude.ai/code/session_011fFY8eruEi1xAkkMBni13B

[Anonymous]

Ticket changed by: athanclark

• status: open --> closed