Hi
The username and password are the same as the domain ftp user name and its password. You can configure the access statistics without password: Plesk CP > Domains > domain.name > Setup > remove the checkbox "accessible via password protected directory '/plesk-stat/'" and save the changes.