Hashed superadmin password
Last modified by Simon Urli on 2026/09/17 14:26
Enabling the superadmin rescue account no longer means leaving its password in clear text in xwiki.cfg: as described in Enable the Superadmin Account, the xwiki.superadminpassword property now also accepts a hashed value, written as {algorithm}hash with one of the algorithms supported by password properties. A plain text value keeps working, so existing configurations are unaffected.