Reset Wazuh Administrative credentials

[Don Simple]

Hello team,

Please can someone assist me and guide me on the procedures to reset my Wazuh admin credentials? I have been having login issues.

Thank you 

[Md. Nazmur Sakib]

Hi Don Simple,


Use this command to change the admin password

bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-passwords-tool.sh  -u admin -p Secr3tP4ssw*rd

Replace the Secr3tP4ssw*rd with your desired password.

The password must have a length between 8 and 64 characters and contain at least one upper case letter, one lower case letter, a number and one of the following symbols: .*+?-.

If you use the tool in an all-in-one deployment, it automatically updates the passwords where necessary. If you use it in a distributed environment On all your Wazuh server nodes, run the following command to update the admin password in the Filebeat keystore. Replace <ADMIN_PASSWORD> with the random password generated in the first step.

echo <ADMIN_PASSWORD> | filebeat keystore add password --stdin --force

sed -i 's/<password>.*<\/password>/<password><ADMIN_PASSWORD><\/password>/g' /var/ossec/etc/ossec.conf

Next restart Filebeat to apply the change.

systemctl restart filebeat

Ref: https://documentation.wazuh.com/current/user-manual/user-administration/password-management.html#changing-the-password-for-single-user

Let me know if this works for you.