{"id":872,"date":"2023-02-17T06:07:13","date_gmt":"2023-02-17T05:07:13","guid":{"rendered":"https:\/\/infosecscout.com\/?p=872"},"modified":"2023-11-22T12:58:21","modified_gmt":"2023-11-22T11:58:21","slug":"kali-linux-default-password","status":"publish","type":"post","link":"https:\/\/infosecscout.com\/kali-linux-default-password\/","title":{"rendered":"Kali Linux Default Password: Default user, root &amp; SSH tips"},"content":{"rendered":"\n<p>Each Linux distribution has its own rules for the default username and password. Some will create it for you, and with most of them, you&#8217;ll have a short wizard on the first boot to guide you with this. Kali Linux is not an exception, and the default user and password have changed overtime. Let&#8217;s recap everything you need to know on a fresh installation.<\/p>\n\n\n\n<p><strong>With the latest version of Kali Linux, a user account is created during the first boot. You have the choice for the username and password. So, there is no default password for the main user on Kali Linux, it&#8217;s the one you set during the installation.<\/strong><\/p>\n\n\n\n<p>But it can be different with pre-built images or some preinstalled services, and there are a few things to know before using the administrator account (root). I&#8217;ll explain everything relate to users and passwords in this article.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_65 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title \" >Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#Whats_the_default_password_on_Kali_Linux\" title=\"What&#8217;s the default password on Kali Linux?\">What&#8217;s the default password on Kali Linux?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#Traditional_setup_with_the_installer_image\" title=\"Traditional setup: with the installer image\">Traditional setup: with the installer image<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#Virtual_machines_and_prebuilt_images\" title=\"Virtual machines and prebuilt images\">Virtual machines and prebuilt images<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#Vagrant\" title=\"Vagrant\">Vagrant<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#What_is_the_root_password_on_Kali_Linux\" title=\"What is the root password on Kali Linux?\">What is the root password on Kali Linux?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#What_is_the_root_password_to_connect_to_Kali_Linux_via_SSH\" title=\"What is the root password to connect to Kali Linux via SSH?\">What is the root password to connect to Kali Linux via SSH?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#Other_default_passwords_on_Kali_Linux\" title=\"Other default passwords on Kali Linux\">Other default passwords on Kali Linux<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#MySQL\" title=\"MySQL\">MySQL<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/infosecscout.com\/kali-linux-default-password\/#Other_applications\" title=\"Other applications\">Other applications<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Whats_the_default_password_on_Kali_Linux\"><\/span>What&#8217;s the default password on Kali Linux?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p><strong>On a traditional setup with the &#8220;Installer&#8221; image downloaded from the official website, the first user is created during the installation. But other pre-built images (like virtual machines), comes with the account already setup.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Traditional_setup_with_the_installer_image\"><\/span>Traditional setup: with the installer image<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>When you install Kali Linux from scratch on your PC, you&#8217;ll get a screen like this on the first boot, where the installation wizard ask the user full name, identifier and password.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"791\" height=\"196\" src=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-create-user.jpg\" alt=\"\" class=\"wp-image-874\" srcset=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-create-user.jpg 791w, https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-create-user-300x74.jpg 300w, https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-create-user-768x190.jpg 768w\" sizes=\"(max-width: 791px) 100vw, 791px\" \/><\/figure>\n\n\n\n<p>Almost anything can be used at this stage, so if you have installed Kali Linux recently, the default user and password is most likely something you picked during these steps.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"789\" height=\"288\" src=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-create-password.jpg\" alt=\"\" class=\"wp-image-875\" srcset=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-create-password.jpg 789w, https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-create-password-300x110.jpg 300w, https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-create-password-768x280.jpg 768w\" sizes=\"(max-width: 789px) 100vw, 789px\" \/><\/figure>\n\n\n\n<p><strong>So, you&#8217;re in charge when it comes to creating the user and password on Kali Linux, there are no default login and password anymore.<\/strong><\/p>\n\n\n\n<p>If you&#8217;ve lost your password, there are ways to recover it (as explained <a rel=\"noreferrer noopener\" href=\"https:\/\/linuxconfig.org\/how-to-reset-kali-linux-root-password\" target=\"_blank\">here<\/a>), but it might be easier to reinstall Kali from scratch. You&#8217;ll get the latest version, and in most cases we don&#8217;t keep tons of personal files on this distribution.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Virtual_machines_and_prebuilt_images\"><\/span>Virtual machines and prebuilt images<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p><strong>With some pre-created images of Kali Linux, the user and password are created for you, and the default values are:<\/strong><\/p>\n\n\n\n<ul>\n<li><strong>Username<\/strong>: kali<\/li>\n\n\n\n<li><strong>Password<\/strong>: kali<\/li>\n<\/ul>\n\n\n\n<p>It&#8217;s the case with virtual machines images (VMware, VirtualBox, QEMU) or some specific images like the edition of Kali Linux for ARM devices (Raspberry Pi for example).<\/p>\n\n\n\n<p>If I remember well, it was also the default identifiers on old versions of Kali Linux, so it might be worth trying it if you can&#8217;t remember which user and password is set on your system.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Vagrant\"><\/span>Vagrant<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Vagrant is yet another option to use Kali Linux. It&#8217;s a different beast when it comes to virtual machines, allowing you to create and configure them in a consistent and repetitive way, from a simple configuration file.<\/p>\n\n\n\n<p>Anyway, if you&#8217;re reading this, you probably know what it is. <strong>If you use Vagrant for your Kali Linux setup, there is also a default login and password set on it:<\/strong><\/p>\n\n\n\n<ul>\n<li><strong>Username<\/strong>: vagrant<\/li>\n\n\n\n<li><strong>Password<\/strong>: vagrant<\/li>\n<\/ul>\n\n\n\n<p>And while I&#8217;m talking about virtual machines in the cloud, if you use Amazon AWS service for Kali, there is no password set. <strong>You need to use the user &#8220;kali&#8221; and the SSH key instead of a password to connect to your Kali Linux instance on Amazon EC2<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_the_root_password_on_Kali_Linux\"><\/span>What is the root password on Kali Linux?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p><strong>As with most Linux distributions on recent versions, the root account is now locked by default on Kali Linux. It&#8217;s not possible to login as root on a fresh installation on a standard computer.<\/strong><\/p>\n\n\n\n<p>The recommendation is to use &#8220;sudo&#8221; whenever possible, as you can generally do everything with it. <br>Just add sudo before any command, and it will give you the administrator privileges if you have the right to use sudo (it&#8217;s the case with the first user):<br><code>sudo &lt;command><br><\/code>Example:<br><code>sudo apt upgrade<\/code><\/p>\n\n\n\n<p><strong>If you ever need to switch temporarily to the root prompt in a terminal, you can use:<br><\/strong><code>sudo su<br><\/code>Which will give you access to all commands, without the need of using sudo (red power!):<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"478\" height=\"148\" src=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-switch-root.jpg\" alt=\"\" class=\"wp-image-876\" srcset=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-switch-root.jpg 478w, https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-switch-root-300x93.jpg 300w\" sizes=\"(max-width: 478px) 100vw, 478px\" \/><\/figure>\n\n\n\n<p>However, it doesn&#8217;t activate the root account for direct login. If you really need it, you&#8217;ll have to create a password for it first.<br>It&#8217;s not recommended, as it&#8217;s a security risk and is almost useless in most cases, but you can still do it with:<br><code>sudo passwd<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"450\" height=\"111\" src=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-set-root-passwd.jpg\" alt=\"\" class=\"wp-image-877\" srcset=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-set-root-passwd.jpg 450w, https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-set-root-passwd-300x74.jpg 300w\" sizes=\"(max-width: 450px) 100vw, 450px\" \/><\/figure>\n\n\n\n<p>You&#8217;ll need to type your password (current user), and then provide a password for the &#8220;root&#8221; account twice. Try to pick something complicated (<a rel=\"noreferrer noopener\" href=\"https:\/\/webinpact.com\/password-generator\/\" target=\"_blank\">this password generator can help<\/a>).<\/p>\n\n\n\n<p>If it was a temporary need, you can lock the account again with:<br><code>sudo passwd -l root<\/code><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_the_root_password_to_connect_to_Kali_Linux_via_SSH\"><\/span>What is the root password to connect to Kali Linux via SSH?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p><strong>SSH access to the root account on Kali Linux is disabled by default. The SSH server configuration file has to be edited to allow it if needed. But it&#8217;s generally not recommended, for security reasons.<\/strong><\/p>\n\n\n\n<p>When it comes to security risks, using a strong password is one thing, but using random usernames is even better. And as &#8220;root&#8221; has the same name on all devices, it&#8217;s the one receiving the most attacks, especially when SSH is open.<\/p>\n\n\n\n<p>Anyway, as always, even if it&#8217;s not recommended to allow root access via SSH, it&#8217;s still possible.<br>Here are the steps to do it:<\/p>\n\n\n\n<ul>\n<li>Open the SSH configuration file with your favorite text editor:<br><code>sudo nano \/etc\/ssh\/sshd_config<\/code><\/li>\n\n\n\n<li>Find the line starting with &#8220;#PermitRootLogin&#8221;.<\/li>\n\n\n\n<li>Remove the &#8220;#&#8221; at the beginning, and change the value to &#8220;yes&#8221; instead of &#8220;prohibit-password&#8221;.<\/li>\n\n\n\n<li>Save and exit the file (CTRL+X).<\/li>\n\n\n\n<li>Restart the SSH service:<br><code>sudo service ssh restart<\/code><\/li>\n<\/ul>\n\n\n\n<p>You can now use root to access the computer (if you enabled the account and set a password following the previous section).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Other_default_passwords_on_Kali_Linux\"><\/span>Other default passwords on Kali Linux<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>I have now answered most of your questions related to the default system passwords used on Kali Linux. But depending on your installations, Kali may come with a bunch of apps preinstalled, that require another password, and some of them are set for you.<\/p>\n\n\n\n<p>Let&#8217;s examine these cases.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"MySQL\"><\/span>MySQL<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p><strong>MySQL is often installed by default on Kali Linux, and if you are not used to it, there is a specific procedure required to access it for the first time, and create the user accounts.<\/strong><\/p>\n\n\n\n<p>If you just type the command &#8220;mysql&#8221; to open the console, you&#8217;ll most likely get an error like:<br><code>\"Access denied for user &lt;username>@localhost\"<\/code><\/p>\n\n\n\n<p>The only way to access the CLI on a fresh installation is to use sudo.<br>The access is enabled only for the administrator account and from the local machine. So, you can use:<br><code>sudo mysql<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"731\" height=\"302\" src=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-default-mysql.jpg\" alt=\"\" class=\"wp-image-878\" srcset=\"https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-default-mysql.jpg 731w, https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-default-mysql-300x124.jpg 300w\" sizes=\"(max-width: 731px) 100vw, 731px\" \/><\/figure>\n\n\n\n<p>No password is required. <\/p>\n\n\n\n<p>Then, if you want to create a password for &#8220;root&#8221;, and allow access from other devices, you need to complete the installation with:<br><code>sudo mysql_secure_installation<\/code><\/p>\n\n\n\n<p>It will guide you to enabled anything you need. But the most important is to create a user and password. <br>From there, you can create all the users you need, with different privileges, as on any MySQL server (you&#8217;ll find plenty of tutorials online about these steps).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Other_applications\"><\/span>Other applications<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p><strong>Many other applications (like <a href=\"https:\/\/infosecscout.com\/use-beef-on-kali-linux\/\" data-type=\"post\" data-id=\"845\">BeEF<\/a>, OpenVAS, Metasploit and others) have default users created for you during the installation.<\/strong><\/p>\n\n\n\n<p>For some of them, there is a password set.<br>For others, you&#8217;ll be asked to created one on the first run.<br>And sometimes, you also have a setup program (like for MySQL) or a configuration file to edit.<\/p>\n\n\n\n<p>Kali Linux keeps a list of these on their documentation, so if you have any doubt, I guess it&#8217;s best to check directly from their website (<a href=\"https:\/\/www.kali.org\/docs\/introduction\/default-credentials\/\" target=\"_blank\" rel=\"noreferrer noopener\">link here<\/a>).<\/p>\n\n\n\n<p>Once your system setup, if you need more guidance to use all these interesting tools on Kali Linux, I have many step-by-step tutorials for you on this website. So, feel free to check them out. Here are a few examples:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/infosecscout.com\/wifite-a-step-by-step-guide-for-kali-linux-users\/\" data-type=\"post\" data-id=\"793\">Wifite: A step-by-step guide for Kali Linux users<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/infosecscout.com\/how-to-remote-access-kali-linux\/\" data-type=\"post\" data-id=\"632\">How To Remote Access Kali Linux<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/infosecscout.com\/john-the-ripper-on-kali-linux\/\" data-type=\"post\" data-id=\"652\">Getting Started With John The Ripper On Kali Linux<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Each Linux distribution has its own rules for the default username and password. Some will create it for you, and with most of them, you&#8217;ll have a short wizard on the first boot to guide you with this. Kali Linux is not an exception, and the default user and password have changed overtime. Let&#8217;s recap&#8230;<\/p>\n","protected":false},"author":1,"featured_media":880,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[16],"tags":[],"taxonomy_info":{"category":[{"value":16,"label":"Kali Linux"}]},"featured_image_src_large":["https:\/\/infosecscout.com\/wp-content\/uploads\/2023\/02\/kali-linux-password-1024x683.jpg",1024,683,true],"author_info":{"display_name":"Patrick Fromaget","author_link":"https:\/\/infosecscout.com\/about\/"},"comment_info":0,"category_info":[{"term_id":16,"name":"Kali Linux","slug":"kali-linux","term_group":0,"term_taxonomy_id":16,"taxonomy":"category","description":"Jump into our Kali Linux Tutorials. They're perfect for getting the hang of this cool Linux distribution. We make it easy to learn the basics and a bit more!","parent":0,"count":37,"filter":"raw","cat_ID":16,"category_count":37,"category_description":"Jump into our Kali Linux Tutorials. They're perfect for getting the hang of this cool Linux distribution. We make it easy to learn the basics and a bit more!","cat_name":"Kali Linux","category_nicename":"kali-linux","category_parent":0}],"tag_info":false,"_links":{"self":[{"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/posts\/872"}],"collection":[{"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/comments?post=872"}],"version-history":[{"count":5,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/posts\/872\/revisions"}],"predecessor-version":[{"id":884,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/posts\/872\/revisions\/884"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/media\/880"}],"wp:attachment":[{"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/media?parent=872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/categories?post=872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosecscout.com\/wp-json\/wp\/v2\/tags?post=872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}