lolcreds

Public credential defaults and exposure patterns for authorized security testing.

TrueNAS

iXsystemsnetwork4 credentials

Credentials4 documented
01

TrueNAS Root/Admin Password

truenas / admin-root-password

TrueNAS CORE and SCALE use local administrative accounts for the web UI, SSH, middleware/API, and console. Credentials are set during installation or first boot.

generated on installuser definedsecretusername/password

Location

public interface
TrueNAS web UI, SSH, console, REST/WebSocket API, and middleware CLI
database

TrueNAS configuration database storing users, groups, and credential metadata

config file

configuration database backups, SSH settings, and system dataset files

secret store

password vaults and configuration backup stores

logs

middlewared logs, auth logs, SSH logs, and audit/system logs

Notes

No universal TrueNAS root/admin password is modeled; installer/setup defines it.

02

API Key

truenas / api-key

TrueNAS supports API keys for authenticated automation access to the middleware API.

generated on installuser definedsecretAPI key

Location

http header
Authorization

Bearer token/API key used by TrueNAS API clients

database

TrueNAS configuration database API key records

config file

automation scripts, Terraform/Ansible configs, and .env files

environment
TRUENAS_API_KEY, TRUENAS_TOKEN
secret store

CI/CD variables, password vaults, and automation secret stores

logs

middlewared API logs and client traces

03

Storage, Directory, Cloud, and Share Secrets

truenas / storage-directory-cloud-secrets

TrueNAS stores credentials for SMB/NFS/iSCSI, LDAP/AD/Kerberos, cloud credentials, replication tasks, rsync modules, S3, apps, and backup integrations.

user definedgenerated on installsecretsecret value

Location

database

TrueNAS configuration database cloud credentials, directory services, replication, sharing, and app settings

config file

configuration database backups, Kerberos keytabs, SMB secrets, app charts, and replication configs

secret store

TrueNAS encrypted config backups, Kubernetes/app secrets, and external vaults

artifact

system config backups, debug bundles, and ZFS replication configs

logs

middlewared, directory service, replication, app, and sharing logs

04

Certificate / SSH / Replication Private Key

truenas / certificate-ssh-key

TrueNAS manages TLS certificates, SSH keys for replication/rsync, host keys, and service certificate/private key material.

generated on installuser definedsecretkey pair

Looks like

pattern
pattern

private key material from TrueNAS certificates, SSH, replication, or app configs

-----BEGIN (RSA |EC |OPENSSH |ENCRYPTED |)PRIVATE KEY-----

Location

database

TrueNAS configuration database certificate and key records

config file

SSH key files, certificate exports, replication keys, and app secret mounts

secret store

configuration backup password stores and certificate vaults

artifact

debug bundles and configuration backups

Scope

Authorized use

LOLCreds helps map the credential surface of real products: known defaults, generated values, credential locations, and exposure patterns.