One mechanism I’ve seen (Jupyter) is to print out a token when the listening service (Webserver) starts. Then this is the credential needed to login to the web

One mechanism I’ve seen (Jupyter) is to print out a token when the listening service (Webserver) starts. Then this is the credential needed to login to the web GUI. The token is randomly generated at runtime and unique to each time the server restarts. It would be expected that you’re running this on a computer you already control access to (remote server that you access with an SSH tunnel or a personal workstation). In this case, the token approach is a nice medium between full user accounts and ease of use while still providing some security.