The SuperUser is a virtual user which is only used for authentication of the initial setup and configuration changes. It’s credentials are stored in the structr.conf.

It is a restricted user that can not log into the Structr backend. The SuperUser can only be used to authenticate REST requests, providing a way to interact with Structr in the case that there’s no other administrative user available. The default name of the SuperUser is superadmin.

For better security, it is recommended to deactivate the SuperUser functionality by simply removing its password (and/or username).


The credentials of the SuperUser are stored in the structr.conf configuration file.

superuser.username = superadmin
superuser.password = <....>
About this article
Last change 2019-05-13
Topics Structr 2.0