Copy config.sample.php to config.php and set a real password hash before production use.
config.sample.php
config.php