Default password of cloud instances (Linux)

Every Linux image in xneelo Cloud comes with a preconfigured default user. This user has root privileges and is used to access, configure, and manage your cloud instance.

As a security measure, passwords are disabled for the default user. If you need password login, you can manually set one during or after instance creation.


  • Default password policy

    Password-based login is disabled by default on all Linux images to reduce the risk of brute-force attacks.

    These are the recommended best practices for default user management:

    • Avoid enabling a password for the default user
    • Use SSH key authentication to connect as the default user
    • Create new users and grant temporary root access with sudo
    • Remove or disable the default user when no longer needed

    Find out how to manage users on cloud instances. 

    If you still wish to set a password, we recommend the following:

    • Do not enable password-based SSH login. 
    • Set a password for the instance console only.





  • Set a password during instance creation

    You can set a default password during instance creation using a cloud-init configuration script.

    In the Create Instance dialog, go to the Config & Password tab. 

    There are two options:

    Set a password for the instance console 

    This will set a non-expiring password for the default user, for instance console access only. Password login via SSH will remain disabled.

    This script works across most cloud-init compatible Linux distributions.

        #cloud-config
password: ""                # Add your password between the quotes
ssh_pwauth: false 
chpasswd:
expire: false  

        Password recommendations:

        • Minimum 12 characters
        • At least 1 uppercase letter (not first or last)
        • At least 1 number
        • Can’t end in a number or special character

        Some Linux distributions may reject weak or non-compliant passwords.

        Note: It is your responsibility to save your password securely. It will not be stored in your cloud project.





      • Set a password after instance creation

        If you didn’t set a password during instance creation, you can still assign one later via SSH.

        This will set a non-expiring password for the default user, for instance console access only. Password login via SSH will remain disabled.

        Steps

        1. 1
          Connect to your instance using SSH – see steps.
        2. 2
          Switch to the root user:

              sudo su
              1. 3
                Update the password:

                      passwd <username>

Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully



                    Assist Note

                    Once you have set a default password for the default user, you can log in to the instance console.

                    Related Posts: