Crafty Controller Password in CasaOS: Where to Find It

If Crafty Controller is installed from the CasaOS App Store and you do not know the first-login password, the password is not a universal default such as admin/admin. Modern Crafty releases generate a random administrator password and store the initial credentials in a text file inside the Crafty application data directory.

The 2024 IceWhale Community post identified the important location as DATA > AppData > crafty > config > default-creds.txt. Current Crafty documentation confirms the same idea for CasaOS and adds an important correction: do not edit default-creds.txt to change your password. That file is for retrieving the generated initial credentials; it does not control the active account password after Crafty has started.

Where Is the Crafty Controller Password in CasaOS?

Open the CasaOS Files app and browse into the application data directory used by your Crafty installation. The original community post gave this path:

DATA
└── AppData
    └── crafty
        └── config
            └── default-creds.txt

Current official Crafty documentation describes the CasaOS path through the Files app as the Crafty app's APP_DATA folder, then the Crafty directory, app/config directory, and finally default-creds.txt. Exact capitalization or intermediate folders can differ if the CasaOS app definition has changed or you customized the app's storage mapping.

The official Crafty dashboard access documentation confirms that the generated credentials are stored in default-creds.txt.

What Does default-creds.txt Contain?

For current Crafty 4 installations, the file contains the initial administrative login details. Crafty's CasaOS installation documentation describes:

Username: normally admin.
Password: a randomly generated password created for the installation.

Crafty changed away from common static default passwords because a predictable administrative password is unsafe. The Crafty 4 changelog records the move to a forced random password on first run.

Open the file only on a trusted local system and avoid posting its contents into screenshots or community discussions. Anyone who has the active administrator password can potentially control Minecraft servers, files, scripts, and other functions managed by Crafty.

Do Not Change the Password by Editing default-creds.txt

This is the most important addition to the short community post. Official Crafty CasaOS documentation explicitly warns that default-creds.txt does not control the password. Editing the text file after installation will not safely update the password stored by Crafty's authentication system.

Think of the file as an installation handoff note:

Crafty generates the initial admin credential.
The generated value is written to default-creds.txt so the administrator can log in.
After login, password changes are managed by Crafty itself.

Do not delete Crafty's database or recreate the entire container merely because you want to change a working administrator password.

Crafty's current user-management documentation places user and role administration under Panel Settings. Current Crafty releases expose account-management controls in the web panel rather than asking users to edit the credential text file.

After logging in with the generated administrator credentials:

Open the Crafty web dashboard.
Go to Panel Settings.
Open the user or account management area.
Select the administrator account or your own user profile.
Use the password-change control provided by your installed Crafty version.
Save the new password and verify that you can log in again before closing your current session.

Crafty's interface has changed across Crafty 4 releases, so the exact icon or dialog name can vary. The current Crafty User and Role Configuration guide is the better reference for the UI on a modern release.

Newer Crafty Releases Also Improve Password Reset Workflows

Crafty continued to improve account management after the original 2024 CasaOS post. In 2026, the Crafty project added work around temporary passwords, password reset controls, and forced password changes. That is another reason not to treat the original credentials file as the long-term password management mechanism.

If your current Crafty version provides a dedicated reset-password dialog for another account, use that authenticated administrative workflow instead of modifying files in the container. For your own account, use the self-service password-change control available in the panel.

What If the CasaOS Path Looks Different?

CasaOS app paths can differ when an application has been imported manually, moved to another disk, or installed from a nonstandard app store. If you do not see the exact community path, inspect the Crafty app's volume mappings in CasaOS and locate the host directory that maps to Crafty's configuration storage.

The file you are looking for is still named:

default-creds.txt

Do not run a broad internet-facing file search or expose the file through a shared folder. Search only within the local Crafty application data directory.

What About a Normal Linux Crafty Installation?

The community title says Linux, while the post itself uses a CasaOS-style path. Official Crafty documentation also provides a Linux example. On a default Linux installation, it shows a command similar to:

sudo cat /var/opt/minecraft/crafty/crafty-4/app/config/default-creds.txt

Your actual path can differ if Crafty was installed elsewhere. Use the path that belongs to your deployment rather than copying the example blindly.

Crafty Dashboard Access May Use HTTPS

Crafty Controller is a management interface with high privileges over game servers and files. Keep it restricted to trusted networks or a properly secured remote-access layer. If your deployment presents the panel over HTTPS with a local certificate, your browser may show a certificate warning until you configure a certificate it trusts.

Do not expose the Crafty admin panel directly to the public internet with only the generated first-login password protecting it. Change the password after first login and use the access controls supported by your network and current Crafty release.

Crafty Password Recovery Checklist

Open the CasaOS Files app.
Locate the Crafty application data directory.
Open config/default-creds.txt.
Use the generated admin credentials to sign in.
Do not edit default-creds.txt to change the active password.
Open Crafty's Panel Settings or account management screen.
Change the administrator password through Crafty's authenticated UI.
Store the new password in a password manager.
Keep the Crafty dashboard restricted to trusted users and networks.

Crafty Controller Password FAQ

What is the default Crafty Controller password?

Modern Crafty 4 releases generate a random initial administrator password rather than using one universal password. Retrieve it from default-creds.txt in the Crafty configuration directory.

What is the default Crafty username?

Official Crafty documentation identifies the generated administrator account as admin for the standard installation flow.

Can I change my Crafty password by editing default-creds.txt?

No. Crafty's CasaOS documentation specifically warns that the file does not control the password. Use the Crafty web panel's account or password management controls.

What if default-creds.txt is missing?

First verify the app's current volume mapping and configuration directory. A custom CasaOS install may place Crafty data somewhere other than the standard AppData path. Also confirm you are looking at the correct Crafty instance rather than an old or unused app-data directory.

Should I change the generated password?

Yes. Current Crafty documentation recommends changing the generated password after you successfully log in. Use a unique strong password and store it securely.