The admin login of my site logs in with any password.
username : admin
password : anything
Using Magento ver. 2.2.6
Please advise how to go about with this.
From app/etc/env.php try to change the admin url and then try again.
Hope it helps!
Can you check that your admin user's password is not saved in the browser ?
Basically what happen when previously you logged in your admin password gets saved, so now when you enter custom password - it will still access the same old one which saved by browser itself.
Do one thing check in some other system from where you haven't logged in admin - then let us know if its still logged in or not.
Because looking at the GitHub repository there is no bug reported for this kind of issue as well.
Hope it helps
As @Manthan Dave suggested for sure its not Magento bug.
There are chances your browser might have saved your password and it is allowing you to login to the admin account. Or it can browser plugin like lastpass.
For verification, you can create a new admin account and delete the old one and see how it goes.
Please confirm there is no custom code has been done on your admin login page by developer.
Any login third party extension you are using?
I am facing same issue, magento admin panel logged in with any password. I have changed the system as you mentioned to logged in first time, but that system also logged in successfully with any password. i have disabled all third party extensions as well.Please help me. Thanks