After review 3

Author: tatevikg1

src/Domain/Identity/Command/ImportDefaultsCommand.php

@@ -11,8 +11,10 @@
 use PhpList\Core\Domain\Identity\Service\AdministratorManager;
 use Symfony\Component\Console\Attribute\AsCommand;
 use Symfony\Component\Console\Command\Command;
+use Symfony\Component\Console\Helper\QuestionHelper;
 use Symfony\Component\Console\Input\InputInterface;
 use Symfony\Component\Console\Output\OutputInterface;
+use Symfony\Component\Console\Question\Question;
 
 #[AsCommand(
     name: 'phplist:defaults:import',
@@ -36,14 +38,27 @@ protected function execute(InputInterface $input, OutputInterface $output): int
         $login = self::DEFAULT_LOGIN;
         $email = self::DEFAULT_EMAIL;
         $envPassword = getenv('PHPLIST_ADMIN_PASSWORD');
-        $password = is_string($envPassword) && trim($envPassword) !== ''
-            ? $envPassword
-            : self::DEFAULT_LOGIN;
+        $envPassword = is_string($envPassword) && trim($envPassword) !== '' ? $envPassword : null;
 
         $allPrivileges = $this->allPrivilegesGranted();
 
         $existing = $this->administratorRepository->findOneBy(['loginName' => $login]);
         if ($existing === null) {
+            // If creating the default admin, require a password. Prefer env var, else prompt for input.
+            $password = $envPassword;
+            if ($password === null) {
+                /** @var QuestionHelper $helper */
+                $helper = $this->getHelper('question');
+                $question = new Question('Enter password for default admin (login "admin"): ');
+                $question->setHidden(true);
+                $question->setHiddenFallback(false);
+                $password = (string) $helper->ask($input, $output, $question);
+                if (trim($password) === '') {
+                    $output->writeln('<error>Password must not be empty.</error>');
+                    return Command::FAILURE;
+                }
+            }
+
             $dto = new CreateAdministratorDto(
                 loginName: $login,
                 password: $password,