Are there any security implications for creating (or not creating) a new user?
If need be, how do I create a new user or change the default user?
The official Debian image ships with at least 2 users,
How do I change
A fresh Arch install ships with only the root user available. Thus you should definitely be creating a new user, as spending too much time as root is dangerous. In addition, you should also change the root password, as leaving as default is a major security risk.
Changing the root password
The password can be changed when logged in as root by running the
Adding a new user
A new user can be created with the
You will be prompted for a new password for the account when it is created.
If you prefer, you can use
To install sudo, run
To allow a user to use
If you want to you can effectively disable the root account by running this command as root:
This option disables a password by changing it to a value which matches no possible encrypted value.
This shouldn't really be necessary if you have a strong root password and have root access through SSH disabled.
Extra trick on raspbian with
I have been reading a bunch of how tos on this, but the easiest is also the simplest
login as pi
add new user
after successful creation add john to sudoers group
log out as pi
login as john
try to update package list
if it works, you're done...