Failed to change password

[JG Kim]

Hello.

I tried to change password of Wazuh Web admin.

I found a tool "curl -so wazuh-passwords-tool.sh https://packages.wazuh.com/4.14/wazuh-passwords-tool.sh" and executed it.

root@LISA:~/work/wazuh# ./wazuh-passwords-tool.sh -u admin -p Security1?
13/02/2026 18:25:21 INFO: Updating the internal users.
13/02/2026 18:25:23 INFO: A backup of the internal users has been saved in the /etc/wazuh-indexer/internalusers-backup folder.
13/02/2026 18:25:23 INFO: Generating password hash
13/02/2026 18:25:25 INFO: The filebeat.yml file has been updated to use the Filebeat Keystore username and password.
13/02/2026 18:25:44 ERROR: Could not load the changes.

And I can't loging after that (even with old password)

May I have some advice for this problem?

All services (wazuh-dashboard / indexer / manager) are active(running)

and the result of filebeat test output is:

root@LISA:~/work/wazuh# filebeat test output
elasticsearch: https://127.0.0.1:9200...
  parse url... OK
  connection...
    parse host... OK
    dns lookup... OK
    addresses: 127.0.0.1
    dial up... OK
  TLS...
    security: server's certificate chain verification is enabled
    handshake... OK
    TLS version: TLSv1.2
    dial up... OK
  talk to server... ERROR 401 Unauthorized:

[Nahuel Figueroa]

Hi JG Kim. What type of installation do you have? Is it an all-in-one or a distributed environment? The password change process differs depending on the configuration. If you have an all-in-one installation, changing the password will immediately affect all Wazuh components. Otherwise, you'll need to follow the additional steps described in the documentation: https://documentation.wazuh.com/current/user-manual/user-administration/password-management.html#changing-the-passwords-in-a-distributed-environment