resetpassword security?

Question

Level 1

4 points

resetpassword security?

Just curious how resetpassword is secure. My dad couldn’t log in using his correct password so I decided to try resetting it. I booted into recovery mode and launched the resetpassword utility via terminal. All I had to do was type a new password twice and reboot and I was able to log in. I never had to enter an appleID/password or provide any verification whatsoever. Just curious what magic this employs to ensure that just any old shmoe with physical access to a Mac can’t do the same thing. Thanks

M1 MacBook Air running Monterey

MacBook Air Apple Silicon

Posted on Jul 15, 2022 7:04 PM

Reply

Answer 1

Owl-53

Level 10

102,175 points

Jul 16, 2022 3:43 AM in response to lnrplxus

In theory, " any old shmoe with physical access to a Mac " would have to have the Knowledge and Skills to perform this action.

If the computer Data and Added Security is that important, Enable FileVault

Reply

Answer 2

lnrplxus Author

Level 1

4 points

Jul 16, 2022 9:08 AM in response to Owl-53

I appreciate the reply. My dad is old and doesn’t do anything important on his computer, so I’m not concerned in this case. I was just surprised that the process didn’t require any validation on my part, but it said I needed to have an internet connection to do it, so I thought maybe it was doing something clever behind the scenes. The knowledge and skills required to carry this out are a two minute google search. Thanks again

Reply

Answer 3

Owl-53

Level 10

102,175 points

Jul 16, 2022 10:20 AM in response to lnrplxus

Actually - the " resetpassword " from Terminal in the Recovery Mode does not require an Internet Connect AFAIK.

Anyway - this become purely academic.

If the computer is that important or the access to the said machine is that critical - Building Security may be worth investing ones resources to insure not " any old shmoe " gets physical Access to where the computer is kept.

Reply

Answer 4

Owl-53

Level 10

102,175 points

Jul 16, 2022 2:11 PM in response to lnrplxus

Just to push this to Really Security from Anyone ding anything to this computer by any means >>

Set a firmware password on your Mac

The above would effectively stop all persons from getting access and changing the User Password except for the person or person with the Firmware Password

Reply

Answer 5

lnrplxus Author

Level 1

4 points

Jul 16, 2022 10:30 AM in response to Owl-53

Got it. Thanks again

Reply

resetpassword security?

Similar questions