I was stupid enough to leave the RP2 exposed to the internet with the default password (for the momentary sake of convenience) for a very short time and someone (I am assuming an automated scanning program) changed the password for the pi user and now I can't log in.

Is there a way to undo it?

1 Answer 1


See How can you recover your password? which explains how to reset the password.

HOWEVER if someone has modified the password there is no way of knowing what else was done.

Either restore from your backup OR do a fresh install - you should have given up on Jessie a year ago - it is unsupported!

The VERY FIRST thing I do on ANY installation is change the password!

  • I am curious, how do you know I am on Jessie? Commented Nov 18, 2018 at 1:28
  • @AngryHacker you tagged your post with "Raspbian-Jessie" - I assume this is true.
    – Milliways
    Commented Nov 18, 2018 at 1:55
  • @Milliways Ahhh, yes. I am installing OctoPrint distribution which comes with Jessie afaik. Commented Nov 18, 2018 at 2:54
  • @Milliways Anyways, the password recover didn't work because whoever hacked me set the disk into read-only mode. Consequently passwd pi wouldn't work. At least I was able to copy everything off the disk. And then, as you recommended, I just reinstalled everything. Commented Nov 18, 2018 at 2:56
  • just be careful with the data you copied off, there could be malicious code in there
    – Chad G
    Commented Nov 19, 2018 at 19:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.