This module enhances security by automatically changing the username and password for the Drupal administrator account (user 1) during cron runs. This prevents brute-force attacks and helps ensure that site administrators don't overlook potential permission issues for other user roles by not routinely using the powerful user 1 account. A magic login URL can be generated via Drush if direct access to user 1 is needed.
It's so easy to work on Drupal as user 1, but bad practice as you might miss any permissions problems that could occur for other users.
To make matters worse, the user 1 account often has the default username of admin, making the task of brute-forcing access twice as easy for any malicious attackers.
This module solves both problems by setting both the username and password for user 1 to random strings each time cron runs. Even if an attacker could somehow guess the username, the password is saved as unencrypted string, so Drupals password check functions will always fail.
If you find yourself needing to login as user 1 anyway for some reason, you can generate a magic login url using drush uli.
Note
Do not use this module on your site if you cannot use drush.
Ask your assistant about Admin Denied
Check compatibility with your Drupal and PHP version, maintenance and security coverage, from current release data. How it works
Depends on
Dependencies of the latest stable release
No dependencies recorded for this project.
Required by
Tracked projects that depend on this one
No tracked projects depend on this one yet.