diff --git a/README.md b/README.md
index 9e0dd2a..9993fc4 100644
--- a/README.md
+++ b/README.md
@@ -26,8 +26,9 @@ Two variants:
 | `minimal`     | 8 GiB | Console, sshd, and enough tools to debug the machine |
 | `workstation` | 16 GiB| GNOME desktop                                |
 
-Default login is `fedora` / `fedora`, and the password must be changed at first
-login. Root is locked.
+Default login is `grenade` / `grenade`, and the password must be changed at
+first login. Root is locked. Both are set in `config/device.env`
+(`DEFAULT_USER`, `DEFAULT_PASSWORD`) if you want a different account.
 
 ## Hardware status
 
diff --git a/config/device.env b/config/device.env
index 59bf53f..bba3278 100644
--- a/config/device.env
+++ b/config/device.env
@@ -55,5 +55,5 @@
 
 # --- default account ----------------------------------------------------
 # Password is expired at first login, so it must be changed immediately.
-: "${DEFAULT_USER:=fedora}"
-: "${DEFAULT_PASSWORD:=fedora}"
+: "${DEFAULT_USER:=grenade}"
+: "${DEFAULT_PASSWORD:=grenade}"
diff --git a/docs/install.md b/docs/install.md
index 726a789..175a3e3 100644
--- a/docs/install.md
+++ b/docs/install.md
@@ -33,7 +33,8 @@ load — the C630's UEFI does not supply one, which is the whole reason the
 
 First boot does two slow things: it relabels the filesystem for SELinux and
 grows the root partition. Several minutes on a USB stick is normal. Log in as
-`fedora` / `fedora` and set a new password when prompted.
+`grenade` / `grenade` — or whatever `DEFAULT_USER` and `DEFAULT_PASSWORD` in
+`config/device.env` were set to — and set a new password when prompted.
 
 ## Extract the Qualcomm firmware