This login runs on the server, so the password isn't exposed in the page — but it's a single shared password. Keep it strong, and change ADMIN_PASSWORD at the top of admin.php from the default.