Change or reset a local authd password

This guide explains how an authd user’s password can be reset.

Local passwords and authd

After the first login, an authd user has a local password. When the user signs in with an Entra ID password through the Entra authentication flow, authd uses that password as the local password.

Passwordless Entra authentication and other authentication flows prompt the user to create a local password. This local password can be used for subsequent logins. It can also be used for offline logins when the broker supports them.

Change a known password

As the user, run:

passwd

The password policy is configured through libpwquality. See configure password quality for more detail.

Reset a forgotten password

To reset a forgotten password, the user must complete an online authentication flow and then choose a new local password:

  1. Start a login through GDM or SSH.

  2. Return to the authentication-method selection instead of entering the current local password.

  3. Select the device code flow, or another authentication flow that can set a local password.

  4. Complete the online authentication and enter the new local password when prompted.

In the SSH flow, enter r at the local-password prompt to return to the authentication-method selection.