Should I delete the system account


#1

Currently with my discourse setup I’ve left the system account as is, uncofigured and just sitting there.

Is this an account I should delete or is it OK to leave? Can it even login/does it have a password set?

I see a set that seems to set the system's password, is it safe to assume that if I delete the account this step will just bring it back?


(Mittineague) #2

The System account is not “just sitting there” it is doing a lot work.

eg. checking member registrations, checking posts, deleting old unconfirmed accounts. etc.

AFAIK you should NOT need to touch it and in fact if deleted it will return.

Consider as being like a kind of “super admin”.


#3

Sorry, poor wording on my behalf. I more meant that I just haven’t touched it.

I have no problem with it being there, I just want to make sure no one can brute force it and login!


(cpradio) #4

If I recall, it doesn’t have a password set, so it can only be logged into via impersonation, but I may be wrong about that.


(Sam Saffron) #5

I think the password is SecureRandom.hex odds of someone cracking that are the same as meteo


#6

Awesome, thanks for the info! Thats all I wanted to know!