If you have just installed bWAPP (via XAMPP, WAMP, Docker, or bee-box), you are likely staring at a login screen wondering: What are the credentials? or Why can’t I log in?

The . If it doesn’t work, re-run the installation script or verify your database container’s health.

If the installation was successful, you will be redirected to the portal homepage. That is it. You are now ready to start exploiting vulnerabilities.

The application uses secure coding practices. The vulnerabilities are generally mitigated or impossible to exploit.

Before you can use these credentials to log in, you must initialize the backend database. 🛠️ Step-by-Step Database Installation and Setup

Ensure your firewall blocks external traffic to the ports hosting bWAPP.

If the installation script fails, check your configuration file. Open the file located at /bWAPP/admin/settings.php in a text editor. Ensure that the database connection parameters match your local server environment (such as XAMPP, WAMP, or a standalone MySQL setup): $db_server = "localhost"; $db_user = "root"; $db_password = ""; (or your specific MySQL root password)

By default, bWapp comes with a single user account. When you first navigate to the login page (usually login.php ), use the following credentials:

When you first log in with bee / bug , you can select a security level at the top of the page. This setting determines how much (or how little) protection is in place for the various vulnerabilities.

bwapp Login Password: Default Credentials & Common Issues

“The bee has a bug.”