monkey/docs/content/setup/accounts-and-security.md

---
title: "Accounts and Security"
date: 2020-06-22T15:36:56+03:00
draft: false
weight: 50
pre: "<i class='fas fa-user-lock'></i> "
tags: ["usage", "password"]
---

## Security in the Infection Monkey

The first time you launch Monkey Island (the Infection Monkey C&C server), you'll be prompted to create an account and secure your island. After account creation, the server will only be accessible via the credentials you entered.

If you want an island to be accessible without credentials, press *I want anyone to access the island*. Please note that this option is insecure, and you should only use it in development environments.

## Resetting your account credentials

To reset your credentials, edit `monkey_island\cc\server_config.json` by deleting the `user` and `password_hash` variables. 

When you restart the Monkey Island server, you will again be prompted with the registration form.

Example `server_config.json` for account reset:

```json
{
  "server_config": "password",
  "deployment": "develop"
}
```