Default credentials are defined in config/config.php. Change them before exposing this panel publicly.