Prior to moving your Hybris Commerce implementation into production, it's important to disable the login auto-fill feature and the default passwords for the backoffice cockpits.
To eliminate this potential security risk, set the pre-populated values to empty in the local.properties file.
###############################################################
# The following disables default user/password for login cockpit pages and hmc
###############################################################
productcockpit.default.login=
productcockpit.default.password=
cmscockpit.default.login=
cmscockpit.default.password=
cscockpit.default.login=
cscockpit.default.password=
hmc.default.login=
hmc.default.password=
