Automattic / studio

Studio by WordPress.com, a free desktop app that helps developers streamline their local WordPress development workflow.
https://developer.wordpress.com/studio/
GNU General Public License v2.0
172 stars 17 forks source link

Feature Request: Do not create the default "admin" user #265

Open lumicliment opened 3 months ago

lumicliment commented 3 months ago

What

It would be very important for security reasons that the default user when creating a new site is not "admin", but that it is created randomly as well as the password.

Why

This would increase the security of each and every Studio installation, by randomly changing the user name, it would be difficult to match different sites in different local environments.

How

No response

wojtekn commented 3 months ago

It is related to https://github.com/Automattic/studio/issues/87

@lumicliment What possible risks do you foresee from using the same username across multiple local sites?