Hardening Debian -Strong Root Password

Root password must be powerful enough not to get itself lost. Otherwise, the entire system can be considered compromised. This section guides you on how to setup a strong root password.

Identified Threat

(T-08) Weak Root Password Compromises Entire OS

(T-09) Same Root Password with Other Services's Password Open For Easier Password Compensation

Actions Required

Create Strong, non-Sharing Root Password

Identified Threat

These are the identified threats related to root password.

(T-08) Weak Root Password Compromises Entire OS

When a weak password is set for root account, it is easily compromised which hence, allowing attacker to have full access to the operating system.

(T-09) Same Root Password with Other Services's Password Open For Easier Password Compensation

When a strong root password is shared across other services' password (same password across multiple services), it is vulnerable when other services' password is compromised.

Actions Required

These are the a numbers of actions available for countermeasures.

Create Strong, non-Sharing Root Password

Root password must not be shared and be very strong such as it is visible for human but intellectually challenged to remember it. One example would be: