Skip to main content

Posts

Showing posts from April, 2015

NEVER EVER leave the default Admin account enabled in FileMaker

I hesitate even to bring this up, because this is Dangerous Knowledge.

When you create a new FileMaker database, FileMaker gives you a default login account, with a default name and password. I wish it didn't and in my opinion, it shouldn't. But it does.

So here's what you need to know: Never, ever leave that default account enabled.

When would this matter?

If the database is stored on your computer and never shared with anybody, keeping the default account enabled means anybody who can get into your computer, can open the database — as developer. Now, this isn't really as big a deal as you might think, because they could do this even if you didn't use the FileMaker default login account. (Hint: Password crackers.) That's one more reason why you need to be careful about the security of your computer.

But God forbid the database is hosted on a server that is configured for remote access! In that case, physical access to the server is irrelevant. Any Internet tro…