Hashed superadmin password

Last modified by Simon Urli on 2026/09/17 14:26

Enabling the superadmin rescue account no longer means leaving its password in clear text in xwiki.cfg: as described in Enable the Superadmin Account, the xwiki.superadminpassword property now also accepts a hashed value, written as {algorithm}hash with one of the algorithms supported by password properties. A plain text value keeps working, so existing configurations are unaffected.

Get Connected