Never leave the default admin username and password active on a production server.
This is where Flussonic differentiates itself. The login you use for the web UI is completely separate from the credentials required to publish a stream (RTMP push) or view a protected stream. flussonic login
Execute service flussonic reload to update credentials without downtime. Bind the UI to an HTTPS port using valid TLS certificates. Never leave the default admin username and password