Lock Down Your Root User
TMO Quick Tip - Lock Down Your Root User
by , 7:30 AM EDT, September 24th, 2007
Mac OS X may sport a friendly user interface, but it is harboring a Unix core underneath. That means the security steps Unix pros take can apply to regular Mac users as well including making sure that root, the ultimate power user on your computer, is under your control and no one else's.
By default, the root user on your Mac is disabled, but it doesn't have a password set, which is a potential security weak point. Setting a password makes it that much more difficult for bad guys to try to hack into your Mac.
I added a password to my root user account, and I also keep that user disabled. Here's how:
- Launch NetInfo Manager. It's in Applications/Utilities.
- Click the padlock in the NetInfo Manager window and enter your administrator user name and password.
- Choose Security > Enable Root User.
- You should see an alert dialog telling you that your root user password is blank. Click OK.
- Enter a password for your root user. Make sure it isn't a password that you are already using for another account on your Mac. Now click OK.
- Choose Security > Disable Root User.
- Enter your administrator user name and password and click OK.
- Click the padlock in the NetInfo Manager window to prevent any other changes.
![]() NetInfo Manager |
|---|
![]() Enable your root user. |
|---|
![]() Your Mac lets you know if you haven't set a root password yet. |
|---|
![]() Enter a unique password for your root user. |
|---|
![]() Disable your root user. |
|---|
Locking down your root user is important because anyone that gains root access to your Mac can do anything they want including deleting files or user accounts, installing applications without your knowledge, and siphoning off any information they want from your hard drive. That isn't likely to happen, but taking steps to help insure that it won't happen is a pretty good idea.
Jeff Gamet is TMO's Morning Editor and Reviews Editor. He lectures, teaches and speaks on Mac OS X and design-related topics, and is the author of The Designer's Guide to Mac OS X from Peachpit Press.
if you have tips or tricks to share, or Mac-related questions you want answered.
Observer Comments
Mon Sep 24, 2007 11:51 am Subject: Good question, guest.
QuoteGuest wrote:
what happens if you forget your root user password. Is it kept in keychain?
No, it is not kept in any keychain. If you forget it, you have to boot to an OS X install CD and reset it. You can do that for any local OS X user account. If you're concerned about this ability, you should have an Open Firmware password that prevents booting from CD or any external device without [yet another] password.
Mon Sep 24, 2007 6:59 pm Subject:
Comments are currently closed. Please email the author instead.
Recent Headlines - Updated July 9th
- Thu, 3:50 PM
- Ted Landau's User Friendly Blog - User Interface Blues
- 3:42 PM
- Reports - Chrome OS Complicates Apple & Google Boards of Directors
- 1:08 PM
- Deal Brothers - Life ‘09 Software Drops to $59.99 Delivered
- 11:06 AM
- News - TechRestore Posts Stop-motion iPhone 3GS Breakdown
- 10:17 AM
- Hot Forum Topic - Parallels versus Fusion: Reader Favorites
- 9:32 AM
- Product News - LaCie Unveils LaCinema Rugged HD Multimedia Hard Drive
- 8:54 AM
- Product News - CheckUp 2.5 Adds Snow Leopard, New Mac Support
- 8:37 AM
- News - Latest Microsoft Ad Hits at MacBook Price Again
- 8:06 AM
- TMO Appearances - TMO’s Jeff Gamet Dives into Social Media at CoMUG
- 7:30 AM
- The Back Page - Looking Ahead at the App Store’s Future
- Wed, 6:48 PM
- Games - Pipe Mania Puzzle Game Released for Mac, iPhone
- 5:36 PM
- Product News - Apple Releases Safari 4.0.2 with Nitro JavaScript Engine Improvements
The Mac Observer Reader Specials
- Download Typestyler, still the Ultimate Styling Tool for Internet, Print and Video Graphics. Works great in Classic with a Native OS X Version on the way. Free Tryout: www.typestyler.com
OWC: Big Drives, High Performance - Not High Prices! SATA 3.5" up to 1.5TB. Notebook up to 500GB. FW up to 6.0TB. 1.0TB Drive Models from as low as $97.99 www.MacSales.com
If you're using a Mac, then you've gotta check out Full Tilt Poker for Mac. This Full Tilt Poker bonus code does the unthinkable, it actually rewards!
RamJet Memory: MacBook and MacBook Pro 4GB kits for $57.99! Mac Pro 4GB Kits $99.99! iMac and Mac mini 4GB Kits for $57.99! 1TB SATA Hard Drives for $109.99! Click hereFor the latest Apple products use Ciao, a price comparison website, to find laptops like MacBook Air. Then find the best prices on MP3 players and use our comparison tool to evaluate mobile phones like the Apple iPhone.
Laptop Hardware Provided by TechRestore - Overnight Mac & iPod Repairs.







