Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

If you can still open a privileged SSH or console session, reset the password immediately with passwd (or sudo passwd to set root’s password). If normal access is blocked, use your provider’s “Reset Root Password” control when available; otherwise boot Rescue Mode, mount the installed system, enter it with chroot, and run passwd root. A changed password does not automatically enable root-password logins over SSH.

Choose the recovery route that matches your access

Use the least invasive method available. A working privileged shell avoids disk mounting; a provider-panel reset avoids identifying partitions; Rescue Mode is the fallback when the installed operating system cannot be reached.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
What you can access Best method Main risk What it changes
Root shell or a sudo-capable user over SSH or the provider console Run passwd or sudo passwd Low; you are changing the live system The account’s password database entry
Provider control panel and emergency console Use the provider’s root-password reset action Low to moderate; labels and reboot behavior vary Usually the root credential on the VPS image
Provider account, but no usable login to the VPS Activate Rescue Mode and use mount plus chroot Incorrect partition or unclean unmount can cause data loss The password on the installed disk
Console access to a RHEL-family image with no usable account Boot with the rd.break emergency-shell parameter Bootloader editing and SELinux handling are required The password from an early boot environment

Panel terminology is provider-specific. Hetzner calls its action “Reset Root Password,” while Victus Cloud documents a comparable control-panel route. If your provider offers that option, it is generally less error-prone than manually mounting a disk.

Prepare before changing anything

  • Create a snapshot or backup. IONOS explicitly warns that an incorrect mount or filesystem operation can cause data loss and requires a backup before its reset procedure.
  • Confirm an alternative console. Keep the provider’s web console or emergency console available in case SSH configuration prevents the new password from working.
  • Record the operating system and access model. Ubuntu commonly expects an installer-created user in the sudo group; many current images expect an SSH key and deliberately disable root-password authentication.
  • Plan a maintenance window. Rescue Mode normally requires a reboot, and a security-context relabel on SELinux systems can make the first subsequent boot take longer.
  • Do not assume a disk name. VPS devices may appear as /dev/sda1, /dev/vda1, or /dev/xvdb1. Verify the installed root partition with lsblk.

Method 1: reset the password from an existing privileged session

When you are already logged in as root

Open a shell and run:

passwd

Enter the new password at the first prompt and enter it again at the confirmation prompt. A successful run reports that the password was updated. The command changes the password for the account represented by your current root shell.

#1 Best Overall
Sale
Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear Adjustable Blower with LED Light,Dust Remover for Computer/House/Outdoor/Car
  • Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
  • With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
  • Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
  • Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
  • Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.

When you are logged in as a sudo-capable user

On Ubuntu and similar installations, set root’s password with:

sudo passwd

sudo first authenticates your existing user, then passwd prompts for the new root password twice. To change another account instead, specify its name, for example:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo passwd username

Ubuntu’s installer normally places its initial user in the sudo group, so this route works even when the root account has never had an active password.

Lock the root password again on Ubuntu

If you needed a temporary root credential but intend to administer the server through sudo, lock the password after testing your sudo access:

sudo passwd -l root

Locking the password does not remove the root account or your sudo rights; it prevents password authentication for that account. Keep a tested sudo user and a working console or SSH key before locking it.

Method 2: use the provider control panel

A panel reset is preferable when ordinary login is unavailable and the provider exposes the feature. It avoids guessing which partition contains the installed system and usually performs the provider’s supported recovery sequence.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Sign in to the provider account, select the affected VPS, and open its recovery, security, or access controls.
  2. Choose the root-password action. On Hetzner the label is Reset Root Password; other providers may use “reset credentials” or similar wording.
  3. Read the confirmation dialog carefully. Some panels display a generated password once, while others let you enter a value. Store it in a password manager rather than in shell history or a ticket.
  4. Apply the change and wait for the panel to report completion. Follow any instruction to reboot, or use the provider’s console to reboot only after the reset has completed.
  5. Test the credential through the emergency or web console first. Then test SSH only if the image permits root-password authentication.

Victus Cloud describes this panel-first approach as the one-line alternative to an in-session passwd command. The exact control and whether it forces a reboot depend on the provider and image, so do not assume that a panel reset has the same side effects everywhere.

Rank #2
EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled | Computer Screen Cleaner Spray and Wipe Microfiber Cloth - TV, Monitor, Laptop, iPad, Car - 6.7oz 1 Pack
  • Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
  • Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
  • Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
  • Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
  • Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth

Method 3: reset it from Rescue Mode with mount and chroot

Use this provider-neutral sequence when you can activate a rescue image but cannot log in to the installed system. The rescue environment runs from a separate image; your normal root filesystem must be mounted before passwd will affect the VPS account.

1. Activate Rescue Mode and open its shell

In the provider panel, enable Rescue Mode or the recovery image, then connect through the emergency console or the rescue SSH credentials supplied by the provider. Follow the provider’s documented reboot step so the VPS actually starts the rescue environment.

2. Identify the installed root partition

List disks and filesystems:

lsblk
lsblk -f

Look for the Linux filesystem containing directories such as /etc, /var, and /home when mounted. Device names differ between virtual machine platforms; examples documented by providers include /dev/sda1, /dev/vda1, and /dev/xvdb1. Never copy an example device name without checking your own output. Selecting a data partition instead of the installed root can alter the wrong filesystem.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

3. Mount the verified root filesystem

Create the mount point if the rescue image does not already provide it, then mount the partition you identified:

mkdir -p /mnt
mount /dev/sda1 /mnt

Replace /dev/sda1 with the device you verified. If the mount fails, stop and resolve the filesystem or device issue rather than trying random partitions. A read-only mount will also prevent a password update; check the rescue documentation before remounting anything read-write.

4. Bind the virtual filesystems

The chrooted system needs access to device, process, and system interfaces. A portable pattern is:

for d in dev proc sys; do mount --bind /$d /mnt/$d; done

Some rescue procedures, including Gandi’s example, also bind the pseudo-terminal tree explicitly:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black
  • 【Large size】:Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
  • 【LED backlight mouse pad】:Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
  • 【Anti-slip rubber base】:Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
  • 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
  • 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
mount --bind /dev/pts /mnt/dev/pts

Use the provider’s exact sequence if it differs. The bind mounts are temporary and must be removed before rebooting into the normal disk.

5. Enter the installed operating system

Change the apparent root directory to the mounted installation:

chroot /mnt

From this point, commands such as passwd write to the mounted VPS installation rather than to the rescue image. Confirm the environment if needed by checking that /etc contains the installed system’s configuration.

6. Set the root or named user password

Run the appropriate command inside the chroot:

passwd root

To recover a different local account, substitute its login name:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
passwd username

Enter the new value twice. If the command reports that the filesystem is read-only, leave the chroot and correct the mount state according to the provider’s recovery instructions before trying again.

7. Schedule an SELinux relabel when required

AlmaLinux, Rocky Linux, CentOS Stream, and Fedora images using SELinux may need their security contexts rebuilt after offline changes. While still inside the chroot, create the marker file:

touch /.autorelabel

The next normal boot will relabel files. Do this when the image’s rescue documentation calls for it; creating the marker is particularly important after the RHEL-family recovery flow.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam Arm Cushion for Desk, Palm Hand Office Laptop Typing
  • 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
  • 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
  • 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
  • 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
  • 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.

8. Exit and unmount cleanly

Leave the installed system:

exit

Unmount the pseudo-terminal and bind mounts, then the root filesystem, using the reverse order of mounting. One explicit sequence is:

umount /mnt/dev/pts
umount /mnt/dev
umount /mnt/proc
umount /mnt/sys
umount /mnt

If a provider’s documented layout uses different mount points, follow that layout. A “target is busy” message usually means a shell or process still has its current directory under /mnt; return to the rescue system’s top-level directory and retry after stopping any temporary process.

9. Disable Rescue Mode and reboot

Deactivate the rescue image in the provider panel, then reboot into the normal disk. Do not test the new password against the rescue shell; that shell uses its own accounts. Wait for the VPS to boot from its installed disk before validating the recovered account.

RHEL-family alternative: the rd.break emergency shell

When a RHEL-family VPS provides a usable console but no account can authenticate, Red Hat documents a bootloader recovery pattern using the rd.break kernel parameter. This route edits the boot entry instead of mounting the disk from a separate provider rescue image.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Open the VPS console and interrupt the bootloader menu.
  2. Edit the selected kernel entry and append rd.break to the kernel command line, following the console’s editor instructions.
  3. Continue booting into the emergency shell. The installed system is commonly mounted at /sysroot.
  4. Remount it read-write:
mount -o remount,rw /sysroot
  1. Enter the installed system:
chroot /sysroot
  1. Set the password:
passwd
  1. If SELinux is enabled, schedule relabeling:
touch /.autorelabel
  1. Exit the chroot and emergency shell, then reboot through the console. The exact number of exit commands depends on how many shells you entered.

This method is specific to the boot process and image configuration. If your provider supplies a rescue image, its documented mount-and-chroot procedure is usually easier to audit and repeat.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Why SSH may still reject the new root password

A successful passwd operation proves only that the local account has a new password. SSH applies a separate authentication policy. Hetzner notes that newer systems such as Debian 11 and Ubuntu 22.04 disabled root password authentication by default because unrestricted root passwords are vulnerable to brute-force attacks. Its reset guidance was created and last changed on June 2, 2026.

If the console accepts the password but SSH returns “Permission denied,” check these items from a console or a known-good sudo session:

Best Value
Sale
Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount, 2 Hole Cable Tray with Wire Management and Cord Organizer for Home Office Standing Desk
  • 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
  • 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
  • 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
  • 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
  • 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
  • PermitRootLogin: the SSH server may allow root only with a key, or prohibit root entirely.
  • PasswordAuthentication: the server may reject all password-based SSH logins even though local passwords work.
  • Firewall and network policy: a VPS firewall, security group, or provider rule may block port 22 or your source address.
  • Image access design: the image may expect an ordinary user plus an SSH key and sudo, not direct root login.
  • Account state: root may be locked, expired, or restricted by an included access policy.

Do not disable key-based or sudo access while experimenting. First prove that a second administrative path works through the provider console or a separate sudo user. If you intentionally change SSH settings, validate a new session before closing the working one and reload the SSH service using the command appropriate to that distribution.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Verify the recovery without locking yourself out

Test locally through the provider console

Use the web or emergency console to log in with the recovered account. A console test separates password correctness from SSH policy and network reachability.

Test sudo administration

If your normal model uses an unprivileged administrator, log in as that user and run a harmless command with sudo. This confirms that the account, sudo membership, and policy still work before you lock or restrict root.

Test SSH in a second session

Keep the existing console or SSH connection open. From a separate terminal, test the intended key or password method. Only close the original session after the new path succeeds.

Check the boot after an offline reset

After Rescue Mode or rd.break, confirm that the VPS boots from its normal disk and that services start normally. On SELinux images, allow time for the scheduled relabel before deciding that the boot has failed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshooting common failures

Symptom Likely cause Safe response
passwd changes a password, but the VPS still rejects it You changed the rescue image’s account, or SSH root-password authentication is disabled Verify the mounted root and test through the provider console; then inspect SSH policy.
The expected /etc or user home directories are missing after mounting The wrong partition was selected Exit the chroot, unmount cleanly, rerun lsblk -f, and identify the installed root before trying again.
passwd reports an authentication-token or read-only error The mounted filesystem is not writable, or required virtual filesystems are absent Check the mount state and bind mounts in the provider’s rescue instructions; do not force writes to an unverified device.
The first boot after recovery is unusually slow on an SELinux image /.autorelabel is rebuilding security contexts Allow the relabel to finish and monitor the console rather than power-cycling repeatedly.
An unmount reports that the target is busy A shell or process still uses a directory below /mnt Return to the rescue environment’s top-level directory, stop temporary processes, and unmount in reverse order.
The provider reset control is absent The plan or image does not expose a panel reset Use the documented Rescue Mode workflow or request the provider’s emergency-console procedure.

Secure the VPS after access is restored

Root is exposed to the internet whenever SSH is reachable on port 22. Victus Cloud recommends a long, random passphrase or, preferably, disabling password login and using an SSH key. Apply that advice only after a tested key or sudo route is available.

  • Use a unique, randomly generated passphrase if a root password must remain enabled.
  • Prefer an ordinary administrative user with sudo and an SSH key for routine work.
  • Disable root-password SSH authentication when your image and operational procedures support key-based administration.
  • Keep the provider console and recovery credentials protected by multi-factor authentication.
  • Retain a current snapshot before future disk-level maintenance.

The safest sequence is therefore: use an existing privileged shell when possible, choose the provider panel before manual disk work, and reserve Rescue Mode or rd.break for a complete lockout. In every case, verify the actual login policy separately from the password change.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.