The session lasts twenty-four hours. Whoever runs the service sets the administrator password. From 1 March 2021, the image no longer includes a default password and the service will refuse to start unless a password has been set. Until 1 March 2021, the service started with a public default password, about which the console displayed a warning.
