A reminder that we need to be careful with our test accounts
21 Oct 2026
In this moment:
Security Chapter
When I read about a 2024 attack that was done through accessing a test account, it reminded me of when I was remoted into a customer site to diagnose and used my usual password for test accounts to log into their system, which worked. This caused concern that I knew their password (Admin1234) followed by discussions on both their and my password choices. I never used that password again!
It isn't just about them being guessable. Earlier in the year I was experimenting with tools to crack encrypted passwords and it was pretty easy when the exercises used common passwords.
Even if it is just a temporary test account, always avoid obvious passwords like Password1, Admin1234 or Test123! plus also avoid ones using your company name.
Source:
https://www.bbc.co.uk/news/articles/c6r7y03e9m3ro
It isn't just about them being guessable. Earlier in the year I was experimenting with tools to crack encrypted passwords and it was pretty easy when the exercises used common passwords.
Even if it is just a temporary test account, always avoid obvious passwords like Password1, Admin1234 or Test123! plus also avoid ones using your company name.
Source:
https://www.bbc.co.uk/news/articles/c6r7y03e9m3ro
Richard Adams
Senior Test Analyst
He / Him
Passionate about quality & testing. Creator of Threat Agents card game and regularly found chatting cyber security.
Open To
Teach
Speak
Podcasting
Write
Sign in
to comment
Better than a generic video, see YOUR test, live, ready to show you what matters most: quality at scale.
Explore MoT
Boost your career in software testing with the MoT Software Testing Essentials Certificate. Learn essential skills, from basic testing techniques to advanced risk analysis, crafted by industry experts.
Into the MoTaverse is a podcast by Ministry of Testing, hosted by Rosie Sherry, exploring the people, insights, and systems shaping quality in modern software teams.
