Default password wont change

[BiscuitDuke]

I have successfully turned my raspberry pi into a vpn, but when I try to change the default password "raspberry" it does not change. I get the message that says it was successfully updated, but when I log back in to the pi or even though ssh, the only password that stays working is the default. Any idea what I;'m doing wrong?
Also if anyone knows how to change the default username "pi", I would appreciate that was well.

[rpdom]

How are you trying to change the password?

This should work

Code: Select all

pi@raspi2 ~ $ passwd

This will not (it changes the root password, which isn't normally set on Raspbian.

Code: Select all

pi@raspi2 ~ $ sudo passwd

[DougieLawson]

This will not (it changes the root password, which isn't normally set on Raspbian.

Code: Select all

pi@raspi2 ~ $ sudo passwd

Code: Select all

sudo passwd pi

will change pi's password without needing to know the old password (which is why having sudo with NOPASSWD is so dangerous). All of my systems have a root password set about five seconds after the first boot is complete.

[jojopi]

sudo passwd pi will change pi's password without needing to know the old password (which is why having sudo with NOPASSWD is so dangerous).

If you already allow an attacker to run shell commands as user pi, they obviously do not need to change the password. And locking you out in such an obvious way is far less dangerous than almost anything else they might do.

An extra layer of password badgering gives you nothing more than a false sense of security. If you allow your user account to be compromised, you can no longer trust anything you do from that account, and particularly you must never escalate privileges with either sudo or su, regardless of password.

[beira]

Thanks for all.