Default HTTP Auth Credentials

Every Opensolr index is protected with HTTP authentication. New indexes get a default username and password, and you can change both at any time.

Your API key is root level. Do not share it. The same key that is set as your initial index password can also call every management endpoint on your account. To give a developer, a script or an AI application API access without handing over that key, issue a scoped API key instead, limited to the endpoints and indexes you choose.

01 · The defaults on a new index

Field	Value
Username	`opensolr`
Password	Your account Automation REST API key, from your Opensolr dashboard.

02 · Changing them

Open your index control panel

Click the index name in your index list.

Go to the Security tab

It is in the left-hand menu of the index control panel.

Set a username and password

The change applies immediately, to every request handler.

03 · What happens when you rotate the API key

New indexes take the new key

Any index created after the rotation uses the new API key as its default password.

Existing indexes keep the old one

Regenerating the API key does not change the password of indexes that already exist. If you want those updated, change them by hand in the Security tab.

Rotate with intent

A rotation is only useful if you also update the places that still hold the old value: your application configuration, your CMS, your scripts.

Treat the API key as a password, because for your indexes it is one. Never put it in client-side JavaScript, and never commit it to a repository.