diff --git a/addons/api/addon/models/account.js b/addons/api/addon/models/account.js
index 76321d86d..4c52347f5 100644
--- a/addons/api/addon/models/account.js
+++ b/addons/api/addon/models/account.js
@@ -9,4 +9,28 @@ export default class AccountModel extends GeneratedAccountModel {
    */
   @fragment('fragment-account-attributes', { defaultValue: {} }) attributes;
 
+  // =methods
+
+  /**
+   * Save account password via the `set-password` method.
+   * See serializer and adapter for more information.
+   * @param {string} password
+   * @param {object} options
+   * @param {object} options.adapterOptions
+   * @return {Promise}
+   */
+  setPassword(password, options={ adapterOptions: {} }) {
+    const defaultAdapterOptions = {
+      method: 'set-password',
+      password
+    };
+    return this.save({
+      ...options,
+      adapterOptions: {
+        ...defaultAdapterOptions,
+        ...options.adapterOptions
+      }
+    });
+  }
+
 }
diff --git a/addons/api/addon/models/fragment-account-attributes.js b/addons/api/addon/models/fragment-account-attributes.js
index ee2281f18..76ee82487 100644
--- a/addons/api/addon/models/fragment-account-attributes.js
+++ b/addons/api/addon/models/fragment-account-attributes.js
@@ -7,7 +7,4 @@ export default class FragmentAccountAttributesModel extends Fragment {
     description: 'The account login name'
   }) login_name;
 
-  @attr('string', {
-    description: 'The account password'
-  }) password;
 }
diff --git a/addons/api/addon/models/fragment-target-attributes.js b/addons/api/addon/models/fragment-target-attributes.js
new file mode 100644
index 000000000..1ab994d9d
--- /dev/null
+++ b/addons/api/addon/models/fragment-target-attributes.js
@@ -0,0 +1,10 @@
+import Fragment from 'ember-data-model-fragments/fragment';
+import { attr } from '@ember-data/model';
+
+export default class FragmentTargetAttributesModel extends Fragment {
+
+  @attr('number', {
+    description: 'The  default port a target should use if present.'
+  }) default_port;
+
+}
diff --git a/addons/api/addon/models/target.js b/addons/api/addon/models/target.js
index 03a3ad5d7..57b87ff29 100644
--- a/addons/api/addon/models/target.js
+++ b/addons/api/addon/models/target.js
@@ -1,11 +1,17 @@
 import GeneratedTargetModel from '../generated/models/target';
-import { fragmentArray } from 'ember-data-model-fragments/attributes';
+import { fragment, fragmentArray } from 'ember-data-model-fragments/attributes';
 import { computed } from '@ember/object';
 
 export default class TargetModel extends GeneratedTargetModel {
 
   // =attributes
 
+  /**
+   * Attributes of this resource, if any, represented as a JSON fragment.
+   * @type {FragmentTargetAttributesModel}
+   */
+  @fragment('fragment-target-attributes', { defaultValue: {} }) attributes;
+
   /**
    * @type {[FragmentHostSetModel]}
    */
diff --git a/addons/api/addon/serializers/account.js b/addons/api/addon/serializers/account.js
new file mode 100644
index 000000000..c014c2361
--- /dev/null
+++ b/addons/api/addon/serializers/account.js
@@ -0,0 +1,39 @@
+import ApplicationSerializer from './application';
+
+export default class AccountSerializer extends ApplicationSerializer {
+
+  // =methods
+
+  /**
+   * If `adapterOptions.method` is `set-password`, the serialization should
+   * include only **password** and the version.
+   * If `adapterOptions.password` is set, the serialization should
+   * include **password** in it's `attributes`.
+   * @override
+   * @param {Snapshot} snapshot
+   * @return {object}
+   */
+  serialize(snapshot) {
+    const password = snapshot?.adapterOptions?.password;
+    let serialized = super.serialize(...arguments);
+    if (password && snapshot?.record?.isNew) serialized.attributes.password = password;
+    if (snapshot?.adapterOptions?.method === 'set-password') {
+      serialized = this.serializeForSetPassword(snapshot, password);
+    }
+    return serialized;
+  }
+
+  /**
+   * Returns a payload containing only new password.
+   * @param {Snapshot} snapshot
+   * @param {string} password
+   * @return {object}
+   */
+  serializeForSetPassword(snapshot, password) {
+    return {
+      version: snapshot.attr('version'),
+      password,
+    };
+  }
+
+}
diff --git a/addons/api/app/models/fragment-target-attributes.js b/addons/api/app/models/fragment-target-attributes.js
new file mode 100644
index 000000000..41eb7d88f
--- /dev/null
+++ b/addons/api/app/models/fragment-target-attributes.js
@@ -0,0 +1 @@
+export { default } from 'api/models/fragment-target-attributes';
diff --git a/addons/api/app/serializers/account.js b/addons/api/app/serializers/account.js
new file mode 100644
index 000000000..af9b2cc1c
--- /dev/null
+++ b/addons/api/app/serializers/account.js
@@ -0,0 +1 @@
+export { default } from 'api/serializers/account';
diff --git a/addons/api/tests/unit/models/account-test.js b/addons/api/tests/unit/models/account-test.js
index 4237ae6b6..dcd3fe8bb 100644
--- a/addons/api/tests/unit/models/account-test.js
+++ b/addons/api/tests/unit/models/account-test.js
@@ -4,21 +4,10 @@ import { setupTest } from 'ember-qunit';
 module('Unit | Model | account', function(hooks) {
   setupTest(hooks);
 
-  // Replace this with your real tests.
   test('it exists', function(assert) {
     let store = this.owner.lookup('service:store');
     let model = store.createRecord('account', {});
     assert.ok(model);
   });
 
-  test('it contains attributes', function(assert) {
-    let store = this.owner.lookup('service:store');
-    let model = store.createRecord('account', {
-      type: 'password',
-      attributes: {
-        login_name: 'loginname'
-      }
-    });
-    assert.equal(model.attributes.login_name, 'loginname');
-  });
 });
diff --git a/addons/api/tests/unit/serializers/account-test.js b/addons/api/tests/unit/serializers/account-test.js
new file mode 100644
index 000000000..85f9b655f
--- /dev/null
+++ b/addons/api/tests/unit/serializers/account-test.js
@@ -0,0 +1,97 @@
+import { module, test } from 'qunit';
+import { setupTest } from 'ember-qunit';
+
+module('Unit | Serializer | account', function(hooks) {
+  setupTest(hooks);
+
+  test('it serializes normally', function (assert) {
+    assert.expect(1);
+    const store = this.owner.lookup('service:store');
+    const serializer = store.serializerFor('account');
+    const record = store.createRecord('account', {
+      type: 'password',
+      name: 'Name',
+      auth_method_id: '1',
+      description: 'Description',
+      attributes: {
+        login_name: 'Login Name',
+      },
+      version: 1
+    });
+    const snapshot = record._createSnapshot();
+    snapshot.adapterOptions = {};
+    const serializedRecord = serializer.serialize(snapshot);
+    assert.deepEqual(serializedRecord, {
+      type: 'password',
+      name: 'Name',
+      auth_method_id: '1',
+      description: 'Description',
+      attributes: {
+        login_name: 'Login Name'
+      },
+      version: 1
+    });
+  });
+
+  test('it serializes password attribute when `adapterOptions.password` is true', function (assert) {
+    assert.expect(1);
+    const store = this.owner.lookup('service:store');
+    const serializer = store.serializerFor('account');
+    const record = store.createRecord('account', {
+      type: 'password',
+      name: 'Name',
+      auth_method_id: '1',
+      description: 'Description',
+      attributes: {
+        login_name: 'Login Name',
+      },
+      version: 1
+    });
+    const snapshot = record._createSnapshot();
+    snapshot.adapterOptions = {
+      password: 'Password'
+    };
+    const serializedRecord = serializer.serialize(snapshot);
+    assert.deepEqual(serializedRecord, {
+      type: 'password',
+      name: 'Name',
+      auth_method_id: '1',
+      description: 'Description',
+      attributes: {
+        login_name: 'Login Name',
+        password: 'Password'
+      },
+      version: 1
+    });
+  });
+
+  test('it does not serialize password for non-new records', function (assert) {
+    assert.expect(0);
+  });
+
+  test('it serializes only password when `adapterOptions.method` is set to `set-password`', function (assert) {
+    assert.expect(1);
+    const store = this.owner.lookup('service:store');
+    const serializer = store.serializerFor('account');
+    const record = store.createRecord('account', {
+      type: 'password',
+      name: 'Name',
+      description: 'Description',
+      attributes: {
+        login_name: 'Login Name'
+      },
+      auth_method_id: '1',
+      version: 1
+    });
+    const snapshot = record._createSnapshot();
+    snapshot.adapterOptions = {
+      method: 'set-password',
+      password: 'Password'
+    };
+    const serializedRecord = serializer.serialize(snapshot);
+    assert.deepEqual(serializedRecord, {
+      password: 'Password',
+      version: 1
+    });
+  });
+});
diff --git a/addons/api/tests/unit/serializers/target-test.js b/addons/api/tests/unit/serializers/target-test.js
index 94cab05e5..e129331eb 100644
--- a/addons/api/tests/unit/serializers/target-test.js
+++ b/addons/api/tests/unit/serializers/target-test.js
@@ -30,7 +30,10 @@ module('Unit | Serializer | target', function(hooks) {
       description: 'Description',
       version: 1,
       type: 'tcp',
-      scope_id: 'org_1'
+      scope_id: 'org_1',
+      attributes: {
+        default_port: null
+      }
     });
 
   });
diff --git a/ui/core/app/components/form/target/index.hbs b/ui/core/app/components/form/target/index.hbs
index a6e5a204e..5a977d2e4 100644
--- a/ui/core/app/components/form/target/index.hbs
+++ b/ui/core/app/components/form/target/index.hbs
@@ -14,11 +14,10 @@
 
   <form.input
     @name="name"
-    @type="name"
+    @type="text"
     @value={{@model.name}}
     @label={{t "form.label.name"}}
     @error={{@model.errors.name}}
-    readonly={{false}}
   as |field|>
     {{#if @model.errors.name}}
       <field.errors as |errors|>
@@ -31,12 +30,10 @@
 
   <form.textarea
     @name="description"
-    @type="description"
+    @type="text"
     @value={{@model.description}}
     @label={{t "form.label.description"}}
     @error={{@model.errors.description}}
-    disabled={{@model.isSaving}}
-    readonly={{false}}
   as |field|>
     {{#if @model.errors.description}}
       <field.errors as |errors|>
@@ -47,6 +44,26 @@
     {{/if}}
   </form.textarea>
 
+  {{!-- TODO this is a type-specific field --}}
+  <form.input
+    @name="default_port"
+    @type="number"
+    @value={{@model.attributes.default_port}}
+    @label={{t "form.label.default_port"}}
+    @error={{@model.errors.default_port}}
+    min="0"
+    step="1"
+  as |field|>
+    {{!-- TODO need to figure out how to reference `attributes.errors` here --}}
+    {{#if @model.errors.default_port}}
+      <field.errors as |errors|>
+        {{#each @model.errors.default_port as |error|}}
+          <errors.message>{{error.message}}</errors.message>
+        {{/each}}
+      </field.errors>
+    {{/if}}
+  </form.input>
+
   <form.actions
     @disabled={{if @model.cannotSave @model.cannotSave}}
     @submitText={{t "actions.save"}}
diff --git a/ui/core/mirage/config.js b/ui/core/mirage/config.js
index 62cb242b7..7f2ea5ba0 100644
--- a/ui/core/mirage/config.js
+++ b/ui/core/mirage/config.js
@@ -63,11 +63,12 @@ export default function() {
     const method = idMethod.split(':')[1];
     const account = accounts.find(id);
     const updatedAttrs = {
-      version: attrs.version
+      version: attrs.version,
+      attributes: account.attributes
     };
     // Set new password
     if (method === 'set-password') {
-      updatedAttrs.password = accounts.attributes.password;
+      updatedAttrs.attributes.password = attrs.password;
     }
     return account.update(updatedAttrs);
   });
diff --git a/ui/core/mirage/factories/target.js b/ui/core/mirage/factories/target.js
index a96e15556..fc090fde4 100644
--- a/ui/core/mirage/factories/target.js
+++ b/ui/core/mirage/factories/target.js
@@ -1,11 +1,25 @@
 import factory from '../generated/factories/target';
 import { trait } from 'ember-cli-mirage';
+import { random } from 'faker';
 
 const randomBoolean = (chance = 0.5) => Math.random() < chance;
 const hostSetChance = 0.3;
 
 export default factory.extend({
 
+  /**
+   * Generates attributes fields by type.
+   */
+  afterCreate(target) {
+    if (target.type === 'tcp') {
+      target.update({
+        attributes: {
+          default_port: random.number()
+        }
+      });
+    }
+  },
+
   /**
    * Randomly selects existing host sets to assign to target.
    */
diff --git a/ui/core/mirage/models/auth-method.js b/ui/core/mirage/models/auth-method.js
index 878b8bd8a..08b1f5ad3 100644
--- a/ui/core/mirage/models/auth-method.js
+++ b/ui/core/mirage/models/auth-method.js
@@ -1,8 +1,7 @@
-import { Model, belongsTo, hasMany} from 'ember-cli-mirage';
+import { Model, belongsTo } from 'ember-cli-mirage';
 
 export default Model.extend({
 
-  scope: belongsTo(),
-  accounts: hasMany('account')
+  scope: belongsTo()
 
 });
diff --git a/ui/core/mirage/serializers/account.js b/ui/core/mirage/serializers/account.js
index 7c6186756..85d38851b 100644
--- a/ui/core/mirage/serializers/account.js
+++ b/ui/core/mirage/serializers/account.js
@@ -6,6 +6,7 @@ export default ApplicationSerializer.extend({
   _hashForModel(model) {
     const json = ApplicationSerializer.prototype._hashForModel.apply(this, arguments);
     json.auth_method_id = model.authMethodId;
+    delete json.attributes?.password;
     return json;
   }
 });
diff --git a/ui/core/translations/en-us.yaml b/ui/core/translations/en-us.yaml
index b648f9971..3e972fc9e 100644
--- a/ui/core/translations/en-us.yaml
+++ b/ui/core/translations/en-us.yaml
@@ -149,6 +149,7 @@ form:
     address: Address
     protocol: Protocol
     actions: Actions
+    default_port: Default Port
 errors:
   titles:
     unauthenticated-error: You are not signed in