administration_password.mdwn 3.62 KB
Newer Older
1
[[!meta title="Administration password"]]
2

3
4
In Tails, an administration password (also called *root password* or *amnesia password*) is required to perform system
administration tasks.
5
6
For example:

emma peel's avatar
emma peel committed
7
  - To [[install additional software|doc/first_steps/additional_software]]
sajolida's avatar
sajolida committed
8
  - To [[access the internal hard disks of the computer|doc/advanced_topics/internal_hard_disk]]
9
10
  - To execute commands with <span class="command">sudo</span>

11
[[!img password-prompt.png link="no" alt="Authentication required: amnesia password (also called *administration password* or *root password*)"]] <!-- Note for translators: the alt tag is useful for SEO. -->
12

13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
Security implications of setting up an administration password
==============================================================

For better security, no administration password is set up by default.

When you set up an administration password, an attacker who learns your
administration password could be able to break all the security measures
built in Tails:

- Monitor all your activity
- Reveal your IP address
- Access all the data in your Persistent Storage
- Write data to the internal hard disk of the computer
- Install such vulnerabilities permanently on your Tails USB stick

To learn your administration password, an attacker could:

- Watch your keyboard while you type your administration password, for
  example through a video surveillance camera, and then accessing
  physically your computer before you shut down Tails.

  To prevent such an attack:

  * Hide your keyboard while typing your administration password in public spaces.
  * Never leave your computer unattended while running Tails.
  * Learn how to [[quickly shut down Tails|doc/first_steps/shutdown]].

- Exploit a security vulnerability in an application in Tails before
  you type your administration password.

  For example, an attacker could exploit a security vulnerability in
  *Thunderbird* by sending you a [phishing
  email](https://ssd.eff.org/en/module/how-avoid-phishing-attacks) that
  could wait until you type your administration password and reveal it.

  Such an attack is very unlikely but could be performed by a strong
  attacker, such as a government or a hacking firm.

  To prevent such an attack:

  * Only set up an administration password when you need it.
emmapeel's avatar
typo    
emmapeel committed
54
  * Always update to the latest version of Tails to fix known
55
56
57
58
59
    vulnerabilities as soon as possible.

  We have plans to fix the root cause of this problem but it requires
  [[!tails_ticket 12213 desc="important engineering work"]].

60
61
62
Set up an administration password
=================================

Tails developers's avatar
Tails developers committed
63
In order to perform administration tasks, you need to set up an administration
64
password when starting Tails, using the [[Welcome
65
Screen|welcome_screen]].
66

67
1. When the Welcome Screen appears, click on the
68
   **[[!img lib/list-add.png alt="Add Additional Setting" class="symbolic" link="no"]]** button.
69

70
   [[!img additional.png link="no" alt=""]]
71

sajolida's avatar
sajolida committed
72
2. Choose **Administration Password** in the **Additional Settings** dialog.
73
74
75
76
77

3. Specify a password of your choice in both the
   <span class="guilabel">Administration Password</span> and
   <span class="guilabel">Confirm</span> text boxes then click
   <span class="button">Add</span>.
78

Tails developers's avatar
Tails developers committed
79
80
<a id="open_root_terminal"></a>

81
82
83
How to open a root terminal
===========================

Tails developers's avatar
Tails developers committed
84
To open a root terminal during your working session, you can do any of the following:
85
86
87
88

  - Choose
    <span class="menuchoice">
      <span class="guimenu">Applications</span>&nbsp;▸
89
      <span class="guisubmenu">System Tools</span>&nbsp;▸
90
91
92
      <span class="guimenuitem">Root Terminal</span></span>.

  - Execute <span class="command">sudo -i</span> in a terminal.