2.19 No default passwords

Verify there are no default passwords in use for the application framework or any components used by the application (such as “admin/password”).

Levels: 1, 2, 3

Drupal 7

Drupal has a default user #1, often named ‘admin’ or ‘administrator’. See also: (Drupal.org: Securing user #1)[https://drupal.org/node/947312]

General

For inspiration you can check out lists like those found on: defaultpassword.com.