> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.itential.com/itential-gateway/4/update-default-password/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server.

# Update default password

> Validate your Itential Gateway installation by changing the default password.

Once Itential Gateway is installed and configured, use this guide to change the default password, get started with the API, and set your security keys.

* Default user name: `admin@itential`
* Default password: `admin`

## Change default password

You must first log in to obtain the authorization token and then paste the token into the change password `curl` command.

```bash
curl -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' -d '{ "password": "admin", "username": "admin@itential" }' 'http://localhost:8083/api/v2.0/login'
{"token": "NTAuMjczOTA4MTYwNDM5OTY2"}
```

```bash
curl -X POST --header 'Authorization: <COPY TOKEN VALUE FROM PREVIOUS CMD HERE>' --header 'Content-Type: application/json' --header 'Accept: application/json' -d '{
   "new_password": "super-secure-password",
   "old_password": "admin"
 }' 'http://localhost:8083/api/v2.0/account/admin%40itential/change_password'
```

### Alternate method: editing the SQLite database

The default password can also be changed by directly editing the underlying SQLite database. This may be required if Itential Gateway is down or otherwise not accepting API requests. The [sqlite3 Python module](https://docs.python.org/3/library/sqlite3.html) is included in all Itential Gateway installations; as such, the following examples assume its usage as your SQLite interface.

#### Load the data file into sqlite3

```bash
sqlite3 automation-gateway.db
```

#### List all tables (optional)

List all the tables present in the data file. The `account` table contains the password to be changed.

```bash
.table
```

#### Update the admin password

Update the `admin@itential` user password on the `account` table. Provide the new password as a SHA-512 hash. In this example, the hash equals "Admin1234!". If you use the hash as-is, be sure to update the password to a unique and secure value once you have access to the system.

```bash
UPDATE account SET password_hash = "pbkdf2:sha512:40000$7z3XJWhA$8fb0c3cc8098cc9d1ae566e7d1d622794bfe8c1808fa9c42a8cdd9b5d098231d6b46f71a74f4b692ed2d21043cb4417234e4efe01df3e928e86f5c96ac449fb8" WHERE name = "admin@itential" ;
```

#### Review your changes (optional)

List all `account` table values to confirm your changes.

```bash
select * from account;
```

#### Exit sqlite3

```bash
.exit
```

## Log in to Itential Gateway

Log in to the Gateway UI running at `https://servername:8083`.

* The username is `admin@itential`.
* The password is the `<super-secure-password>` you selected in the previous step.

For Gateway 2022.1, log in at `https://servername:8443`.

## Password reset functionality

During initial (first time) login as admin, a Change Password feature is enabled that allows you to enter a new password.

* You will be asked to set security questions and a strong password that meets security guidelines.
* The default email for admin is set to `admin@itential.com` but can be changed to an email that complies with your organization's standards. The email and security answers you set will be used as an identifier for the account in case of password or username recovery.
* For creation of user accounts, the email ID is a mandatory field.

Refer to [Initial configuration](/itential-gateway/4/initial-configuration) for more information.

> Validate your Itential Gateway installation by changing the default password.