I was stupid enough to leave the RP2 exposed to the internet with the default password (for the momentary sake of convenience) for a very short time and someone (I am assuming an automated scanning program) changed the password for the pi user and now I can't log in.

Is there a way to undo it?


See How can you recover your password? which explains how to reset the password.

HOWEVER if someone has modified the password there is no way of knowing what else was done.

Either restore from your backup OR do a fresh install - you should have given up on Jessie a year ago - it is unsupported!

The VERY FIRST thing I do on ANY installation is change the password!

| improve this answer | |
  • I am curious, how do you know I am on Jessie? – AngryHacker Nov 18 '18 at 1:28
  • @AngryHacker you tagged your post with "Raspbian-Jessie" - I assume this is true. – Milliways Nov 18 '18 at 1:55
  • @Milliways Ahhh, yes. I am installing OctoPrint distribution which comes with Jessie afaik. – AngryHacker Nov 18 '18 at 2:54
  • @Milliways Anyways, the password recover didn't work because whoever hacked me set the disk into read-only mode. Consequently passwd pi wouldn't work. At least I was able to copy everything off the disk. And then, as you recommended, I just reinstalled everything. – AngryHacker Nov 18 '18 at 2:56
  • just be careful with the data you copied off, there could be malicious code in there – Chad G Nov 19 '18 at 19:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.