passwd<\/pre>Terminal will ask for your old password to confirm the request. Once authenticated, you should see a prompt to enter the new credential.<\/p>
\n
\n\t\t\t\n\t\t\t\t<\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>Enter your new password twice. If the change is successful, Terminal will print the “Password updated successfully” message. Otherwise, an error will show up, indicating the issue.<\/p>
How to change another user’s password as a root user<\/h2> The root<\/strong> has the highest privilege in Linux and can modify any settings, including other accounts’ passwords. To do so, switch to the account using this command:<\/p>su root<\/pre>Enter your root password. Then, specify the username after the passwd <\/strong>command like the following:<\/p>passwd username<\/pre>As an example, if you want to change JohnDoe<\/strong>’s user password, use this command:<\/p>passwd JohnDoe<\/pre>Since you logged in as root, you don’t need to enter the account’s password. If the process is successful, your command-line interface will print a confirmation message.<\/p>
In addition to root, you can use another superuser account to change Linux passwords by adding the sudo<\/strong> prefix to your command:<\/p>sudo passwd JohnDoe<\/pre>\n\n\n
\n
\n \n \n <\/svg>\n Important\n <\/span>\n \n Important!<\/strong> As a superuser, you’re also able to change the root password. Therefore, ensure you properly manage sudo users<\/a> to restrict administrative access and maintain optimal system security.\n <\/p><\/div>\n\n\n\n<\/p>How to reset a forgotten password using root<\/h2> You can use a superuser or the root user to reset forgotten passwords. However, it might not work if your system uses the lightweight directory access protocol<\/a> (LDAP) since you must enter the old credentials.<\/p>To get around this, you can directly edit the user password in \/etc\/shadow<\/strong> – the file containing information about all account credentials in your system. Here’s how to do so:<\/p>\nOpen the file by running this command:<\/li>\n<\/ol>nano \/etc\/shadow<\/pre>\nYou will see encrypted passwords after the usernames within the first two colons. Find an account whose credentials you remember.<\/li>\n\n\n\n Highlight the encrypted password by pressing Shift + arrow key<\/strong>. Hit Alt + 6 t<\/strong>o copy it. <\/li>\n\n\n\nUsing the arrow keys, navigate to the account for which you want to change the password. Highlight the password and hit Delete<\/strong>.<\/li>\n\n\n\nPaste the copied password by pressing Ctrl + U<\/strong>.<\/li>\n\n\n\nPress Cltr + X<\/strong>, Y<\/strong>, and Enter<\/strong> to save the changes.<\/li>\n\n\n\nOnce you return to the main shell, enter the following command to change the user’s password:<\/li>\n<\/ol>passwd username<\/pre>\nEnter the temporary password you copied and fill in the new one.<\/li>\n<\/ol>That’s it! If you encounter a permission issue, ensure you are logged in as root. Remember to add sudo<\/strong> before your commands if you’re using superuser access<\/span>.<\/p>How to reset the root password<\/h2> You can only reset the root password with sudo. If you don’t have access to a superuser account, recover the credential via Linux’s GNU unified bootloader<\/strong><\/a> <\/strong>(GRUB), which you can access by holding Esc <\/strong>or Shift<\/strong> during the system boot.<\/p>Since the steps to recover the root password differ depending on the Linux distro, check your operating system documentation to learn more about them. For example, the Red Hat Enterprise Linux page<\/a> explains how to do so for CentOS and AlmaLinux.<\/p>However, some VPS hosting providers don’t let users access the GRUB menu or reboot the system themselves. In this case, contact customer support for assistance.<\/p>
\n
\n\t\t\t\n\t\t\t\t<\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>At Hostinger, however, you can reset the root password easily via the hPanel. To do so, navigate to the VPS overview<\/strong> menu and click Change<\/strong> on the Root password. Enter the new credentials and hit Save<\/strong>.<\/p>Alternatively, use Kodee AI Assistant<\/a> to change your VPS password. Simply access the menu via your dashboard’s left sidebar and type a prompt like “Please change my server’s password to YourNewPassword.”<\/p>Linux password management best practices<\/h2> In this section, we’ll review some best practices to improve your Linux system’s password security.<\/p>
Use strong passwords<\/h3> A strong password is significantly more difficult to guess, improving your system’s security. Hackers can crack 11-character lowercase passwords in minutes, while ones with letters and symbols take years<\/a>.<\/p>Here are several tips to make a stronger password:<\/p>
\nAdd symbols and numbers<\/strong> – extra characters increase possible password combinations, making it more difficult to guess. <\/li>\n\n\n\nMake the password longer<\/strong> – your password should ideally be 12 characters or longer. <\/li>\n\n\n\nAlways use a unique password <\/strong>– a shared credential enables cyber criminals to exploit a single entry point to access different accounts and platforms.<\/li>\n\n\n\nUse a passphrase<\/strong> – a passphrase is a combination of words that are easy to remember but difficult to guess, like ILikeLinuxForThePenguin<\/strong>.<\/li>\n\n\n\nUse password management software<\/strong> – a tool like NordPass<\/strong><\/a> helps generate and store randomized passwords in an encrypted location.<\/li>\n<\/ul>\n\n\n
\n
\n
\n \n <\/svg>\n \n Pro Tip <\/p>\n <\/div>\n
According to experts, password length is more important for security<\/a> than the complexity.<\/p>\n <\/div>\n \n\n\n\n<\/p>Set up a secure password policy<\/h3> Linux doesn’t have a password requirement by default, which can be unsafe since users might set up an easy-to-guess credential. To minimize security risks, enforce a policy in your Linux system.<\/p>
You can do so by adding the libpam-pwquality<\/strong> setting to the common-password<\/strong> file. Here are the steps:<\/p>\nUpdate your system repository using this command:<\/li>\n<\/ol>sudo apt update<\/pre>\nInstall the libpam-pwquality<\/strong> module by running:<\/li>\n<\/ol>sudo apt install libpam-pwquality<\/pre>\nOpen the common-password<\/strong> file using nano:<\/li>\n<\/ol>sudo nano \/etc\/pam.d\/common-password<\/pre>\nAdd the following line at the top of the file. We will explain the setting parameters in a bit. <\/li>\n<\/ol>password requisite pam_pwquality.so minlen=12 ucredit=1 lcredit=1 ocredit=1 minclass=3<\/pre>\nAdd a hash (#<\/strong>) symbol at the beginning of each line to disable other settings. <\/li>\n\n\n\nPress Ctrl + X<\/strong>, Y<\/strong>, and Enter<\/strong> to save the changes. <\/li>\n<\/ol>Now, check if the policy works by changing a user’s password. If the new one doesn’t fit the requirement, Terminal will print a warning message.<\/p>
\n
\n\t\t\t\n\t\t\t\t<\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>You can adjust the password policy by changing the parameters after pam_pwquality.so<\/strong>. Here are some of the settings and what they define:<\/p>\nminlen<\/strong> – the number of characters in a password.<\/li>\n\n\n\nucredit <\/strong>– the number of uppercase letters.<\/li>\n\n\n\nlcredit<\/strong> – the number of lowercase letters.<\/li>\n\n\n\nocredit <\/strong>– the number of other characters.<\/li>\n\n\n\nminclass<\/strong> – the number of minimum character types. <\/li>\n<\/ul>Check the pam_pwquality<\/a> module documentation to learn more about other parameters and their values.<\/p>Audit users and passwords<\/h3> The \/etc\/shadow<\/strong> file contains information about all users in your system and their password status. For example, you can identify the latest modification and expiration date.<\/p>Regularly check this file to ensure all users update their passwords periodically. Also, review if unauthorized accounts exist in your system, which hackers often create to infiltrate your server.<\/p>
While you can inspect each entry manually, it will take a lot of time if your system has many users. To simplify the process, back up the file at a specific time and compare it with the current version.<\/p>
Use a cron job<\/a> to schedule an automatic backup. Then, check for discrepancies using the diff<\/strong> command like so:<\/p>sudo diff \/etc\/shadow_old \/etc\/shadow<\/pre>If you need help with writing the automation script, use the Kodee<\/strong> to generate it. Simply enter, “Generate a cron job script that backs up the \/etc\/shadow file to shadow_DD_MM_YYYY.”<\/p>\n
\n\t\t\t\n\t\t\t\t<\/path>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/div>We also recommend checking the activity logs for failed login attempts. To do so, print the content of the auth.log<\/strong> file using the cat<\/strong> command:<\/p>sudo cat \/var\/log\/auth.log<\/pre>To check specific activity or user logs, pass the output to the grep<\/strong> command. For example, we will print entries containing the phrase “could not identify password” using the following:<\/p>sudo cat \/var\/log\/auth.log | grep \"could not identify password\"<\/pre>Set password expiration<\/h3> Updating account credentials frequently is crucial for maintaining optimal system security. You can force a password change for a specific user by setting the expiration date to zero using chage<\/strong> or passwd –expire<\/strong> commands.<\/p>The chage<\/strong> utility lets you change a user’s password expiration date, the modification date, and the maximum interval between the renewal. Before modifying these details, let’s review them using this command. Replace username<\/strong> with the account you want to check:<\/p>sudo chage -l username<\/pre>To change the expiration deadline, use the -E<\/strong> option instead, followed by the date in YYYY-MM-DD<\/strong> format<\/p>sudo chage -E 2025-12-20 username<\/pre>Meanwhile, use the -M<\/strong> option to set how many days are left until the password expires. For example, the following will force the user to update their credentials after 90<\/strong> days:<\/p>sudo chage -M 90 username<\/pre>\n\n\n
\n
\n \n \n <\/svg>\n Important\n <\/span>\n \n Important!<\/strong> Since Linux commands are case-sensitive, be careful when using -M<\/strong> and -m<\/strong>. To check other options, run chage –help<\/strong>.\n <\/p><\/div>\n\n\n\n<\/p>Alternatively, you can force a password reset using the passwd<\/strong> command:<\/p>sudo passwd --expire username<\/pre>In the next login, the user will see a warning that their password has expired and they need to enter a new one. You can also do so with chage<\/strong> by setting the remaining days to zero:<\/p>Sudo chage -M 0 <\/pre>Conclusion<\/h2> Regularly changing your Linux system’s account password helps minimize security risks. To do so, log in to your machine via Terminal or SSH, run the passwd<\/strong> command, and enter the new credential.<\/p>You can also change another user’s password by logging in as root<\/strong> or a superuser and specifying their account name after the passwd <\/strong>command. It is also useful for resetting forgotten credentials.<\/p>To improve security, your new password should be at least 12 characters long and contain combinations of symbols. We recommend setting up a password policy in your Linux distribution by adding the rule into the \/etc\/pam.d\/common-password<\/strong> file.<\/p>Regularly check all accounts and their passwords by opening the \/etc\/shadow<\/strong> file to ensure the credentials are up to date. You can force Linux users to update theirs using the passwd –E<\/strong> or chage -M 0 <\/strong>command.<\/p>
![\"\"](\"https:\/\/imagedelivery.net\/LqiWLm-3MGbYHtFuUbcBtA\/wp-content\/uploads\/sites\/2\/2023\/02\/VPS-hosting-banner.png\/w=1024,h=1024,fit=scale-down\")
<\/a><\/figure>\n \n