What is /etc/passwd and why is it important on Linux?

Question

AskAI Engine · Accepted Answer

/etc/passwd is a plain-text configuration file on Linux and Unix-like operating systems that stores basic account information for users. It is important because it maps user names to user IDs (UIDs), group IDs (GIDs), home directories, and the location of the user’s shell. Many system tools rely on this file to display user information and to determine how to handle logins. Because it contains sensitive account metadata, you should treat it as a security-critical file and avoid editing it without understanding the impact.What information is inside /etc/passwd?Each line in /etc/passwd represents one user account and follows this format:username:password_field:UID:GID:GECOS:home_directory:login_shellusername: The login name.password_field: Historically stored password hashes; on modern systems it is often set to x or * and real password hashes are stored elsewhere (e.g., /etc/shadow).UID: User identifier number.GID: Primary group identifier number.GECOS: Descriptive fields (often full name, office, etc.).home_directory: Path to the user’s home directory.login_shell: The program used for interactive login (e.g., /bin/bash or /usr/sbin/nologin).Example of a typical lineYou might see something like:alice:x:1001:1001:Alice Doe:/home/alice:/bin/bashHow to view /etc/passwd safelyYou can read it with standard commands. For example:View with less: less /etc/passwdSearch for a user: grep '^alice:' /etc/passwdList only usernames: cut -d: -f1 /etc/passwdImportant security notesDo not edit /etc/passwd casually: Incorrect changes can break logins or system services.Passwords are usually not here: On most modern Linux systems, password hashes are stored in /etc/shadow with stricter permissions.Permissions matter: Typically, /etc/passwd is world-readable, but /etc/shadow is restricted.When would you need to change user account data?Instead of manually editing /etc/passwd, use system administration tools such as useradd, usermod, and passwd (or your distribution’s admin tooling). These tools update related files consistently (like /etc/shadow and group mappings), reducing the risk of inconsistencies.Quick troubleshooting tipIf a user cannot log in, check whether their shell is set to something like /usr/sbin/nologin, verify the home directory path, and confirm the UID/GID mapping. Also check logs (e.g., /var/log/auth.log on Debian/Ubuntu or /var/log/secure on RHEL-based systems) for the real reason.Would you like a step-by-step guide for diagnosing a specific login problem related to user entries in /etc/passwd?

What is /etc/passwd and why is it important on Linux?

🏆 Main Sources

Additional Sources