Innovate | Connect | Transform
ContactService statusUSD $

GICT knowledge base

Change or Recover a Webmin Password with the Correct Account Scope

Published

Webmin

Webmin can authenticate a user with a matching Unix account password or a separate Webmin password. Identify that authentication source before changing anything: changing a system account can affect SSH and other services, while a Webmin-only credential has a narrower purpose.

If you can still sign in

For an authorized system-user password change, use System > Change Passwords and select the intended Unix user. For Webmin-specific authentication and permissions, inspect Webmin > Webmin Users instead. Do not assume those modules change the same credential or that permission to change one user’s password authorizes a root reset.

If Webmin login is unavailable

An authorized server administrator with root access can use the current Webmin CLI interactively on package-based installations:

webmin passwd --user username

Replace username with the actual existing Webmin login. This is a password-changing operation, not a diagnostic check. When both account types exist, review the interactive choice carefully. The documented --unix and --webmin-only options select different credential stores; do not choose one without understanding the affected services.

If the command is unavailable, locate the installed Webmin CLI and consult the documentation for that release. Source installs can use a bundled command under their actual installation directory, and nonstandard configuration directories require the appropriate config option. Do not copy the old article’s malformed /etcwebmin path or assume every server uses /usr/local/webmin.

Recover without exposing a password

Use interactive entry instead of putting a replacement in shell arguments, public logs or a screenshot. If you have neither authorized shell access nor a working administrator login, use the host’s verified recovery process. Test the intended Webmin HTTPS account and any affected system login afterward, keeping existing recovery access available until successful.

References: current CLI recovery; Unix password module; Webmin Users.

Reviewed October 15, 2026. Documentation review; no Webmin or Unix credential was changed.

Related guides

Account services are unavailable until the production backend is configured.