How do I create a new user?

Question

Are there any security implications for creating (or not creating) a new user?

If need be, how do I create a new user or change the default user?

Answer 1

Debian

The official Debian image ships with at least 2 users, root and pi. You will only be able to login to the pi account.

How do I change pi's password?

At the very least, you should change the password for the pi account, as anybody with a RPi will be able to log onto yours. To do this, run passwd from the command line and follow the prompts.

How do I change pi's username?

If, like me, you want to use your own name, you want to use usermod like this:

usermod -l newname -d newname -m oldname

There are more options for usermod, which can be found by running man usermod.

Should I set a password for root?

Debian's root does not have a password and is inactive - you cannot login to it or su to root. You should not change this, as it is a security risk and sudo is more secure.

So, are my files secure once I change the password?

Don't be too relaxed with your RPi's security though, the filesystem is not encrypted, by default, and therefore, anyone with physical access can just remove the SD card and read it using another machine.

Related questions

• Why do I have to sudo?

Answer 2

Arch

A fresh Arch install ships with only the root user available. Thus you should definitely be creating a new user, as spending too much time as root is dangerous. In addition, you should also change the root password, as leaving as default is a major security risk.

Changing the root password

The password can be changed when logged in as root by running the passwd command.

# passwd
Changing password for root.
(current) UNIX password: 
Enter new UNIX password:
Retype new UNIX password:

Adding a new user

A new user can be created with the adduser or useradd commands. adduser is probably easiest, the only required field is the name (you can skip the others by pressing enter):

# adduser
Login name for new user []: 

You will be prompted for a new password for the account when it is created.

sudo

If you prefer, you can use sudo, in a similar way to Debian users.

Installation

To install sudo, run

pacman -S sudo

as root.

Use

To allow a user to use sudo they need to be added to the sudoers file. This can be done in two ways.

• Add the user to the wheel group using usermod and uncomment this line in the sudoers file:

  %wheel ALL=(ALL) ALL
  

• or add the user directly to the sudoers file:

  username ALL=(ALL) ALL
  

NOTE You should never edit the sudoers file with Vim, Emacs, etc. You should always edit it via visudo. This prevents you from messing up the syntax and rendering sudo unusable for you.

Disable Root

If you want to you can effectively disable the root account by running this command as root:

# passwd --lock

This option disables a password by changing it to a value which matches no possible encrypted value.

This shouldn't really be necessary if you have a strong root password and have root access through SSH disabled.

Answer 3

I have been reading a bunch of how tos on this, but the easiest is also the simplest

login as pi

add new user

 sudo adduser john

after successful creation add john to sudoers group

 sudo usermod john -g sudo

log out as pi

login as john

try to update package list

 sudo apt-get update

if it works, you're done...