Two seeded accounts exist for building and testing:
- TEST / TEST — a standard creator with sample projects and credits.
- ADMIN / ADMIN — full admin access.
Sign in with the username, not an email address.
These are refused at login when the app runs in production, regardless of whether the rows exist in the database. That is enforced in the sign-in path itself, not by omitting them from a seed — the difference between a convenience feature and a backdoor. They are watermarked "Demo" in the top bar so nobody mistakes one for a real account.
On a staging server you can re-enable them with ALLOW_DEMO_LOGINS=true. Setting it to false refuses them everywhere, including development.