Root Password Reset

July 1, 2013 15.4k views
How does the root password reset button work? I understand that it wil reset the root password and email me the new one but, how does it do this on a more technical level? For me, I am just worried about the security of this feature. Understanding the feature more would help me not worry as much. Note: I have enabled 2-factor auth on my DO account and on my email account. Just being overly cautious...
  • Great question! On the password reset page it says "This will shut down your droplet and a new root password will be set and emailed to you."

    Question is whether or not I will be able to access the droplet again once the new password is reset and sent via email... will I?

  • Yes, you will be able to access your droplet after the root password is reset -- it'll be automatically powered on.

3 Answers
Not to side-step the question, but if you're concerned about the security surrounding e-mailed passwords, you should check out this article: How to Use SSH Keys with DigitalOcean Droplets
by Etel Sverdlov
This guide is for Mac OS X and Linux users. Learn how to use SSH Keys with DigitalOcean Droplets.
Yeah, I've been looking at implementing the SSH Keys in DO. There is just something 'sketchy' about having a button that goes in a reset the password to the most powerful account on my VPS. If anyone has more information on the technical process behind this button it would be most appreciated. Thanks!
All this process does is set the entry in the /etc/shadow file.
Have another answer? Share your knowledge.