Whonix installation from default password to user password

[TNT_BOM_BOM]

• Default admin password: changeme
• Default root password: changeme
• Default user password: changeme

---

(Technically there is no “admin” password. Only a password for the root account. So “admin” and root acocunt is the same. This is mentioned here to satisfy common search engine results.)

(Edit by Patrick. Below post unmodified.)

---

i was kept wondering from the first time of using Whonix , why Whonix has a default root passowrd which is = changeme , and default username which is = user ?

why dont we give this opportunity to the user himself to decide which one he like to have at the Whonix installation stage ? like any other distro installation (Debain , Qubes , Ubuntu , Kali …etc).

[Patrick]

• Default admin password: changeme
• Default root password: changeme
• Default user password: changeme

---

(Technically there is no “admin” password. Only a password for the root account. So “admin” and root acocunt is the same. This is mentioned here to satisfy common search engine results.)

(Edit by Patrick. Below post unmodified.)

Because ‘technically’ there is “no installation”. Whonix images are pre-installed operating system images. The history of Whonix is that we started to ship downloadable VM images. What you might perceive as installation process, for example VirtualBox import is “not an installation”. It’s the same for any VM image that would be imported. There is no feature in virtualizers that would allow to inject code to do things at this stage. The code running for importing the images is solely by the virtualizer and modifying that would be non-trivial and require to maintain a fork of the virtualizer. To add such code on the operating system that hosts Whonix would be non-trivial and operating system specific. It would require to mount and modify the images. Too unimportant to put any effort into it. Would probably result in more bugs, and confusion, than what we have now. I see Qubes(-Whonix) as the evolution of this, since there are no passwords there.

[TNT_BOM_BOM]

interesting , i will add it here:-

https://www.whonix.org/wiki/VirtualBox#Starting_Whonix

just one more question:-

can we have a tool or script or whatever that can randomize username & password for each new installation of whonix ? or at least the password ?

because if we can do that , then if the user is so noob to linux environment which he cant know how to change the root password and/or username = he is still safe as if he changed them at the beginning.

maybe u gonna ask how he will know his username and password ?

in two ways:-

1- its the same thing , it will appear in the terminal screen that your username&password is this and that please change them as soon as possible (if this sentence will even has a value anymore in this case)

2- we show him a message similar to timesync or whonixcheck say for e.g:- your username&password is this and that.

as hardend to point number 2 , we can put an icon saying:-

“whonix default username&password” which is containing the password&username of the WS or GW. because i suggested this hardening like if someone will ask " oh i closed the pop-up window of username & password at whonix startup where can i find them"

but whole point number 2 , is not needed if we can show the username&password inside the terminal screen.

so is this possible to happen inside whonix ?

edit: sorry not in the virtualbox page , it will better in the FAQ page.

[Patrick]

Random user name, no, because it’s shared among all Whonix users which is better than random.

Random password, no, because that would lead to loads of support requests people mistyping their passwords.

I am also not interested in this, because see:

Dev/Permissions

The reason I didn’t abolish passwords in Non-Qubes-Whonix altogether is that the likely upcoming endless discussion about this would not be helpful.

[Patrick]

I don’t think we need this in the FAQ which stands for frequently asked
questions. This is the first time why this was asked ever.

[TNT_BOM_BOM]

well at least it as reference in case someone read the FAQ , because this explanation havent been mentioned in anywhere in the documentation. (tho it should be there)

but if u dont like the idea , then delete it.

[Patrick]

No random stuff should be put there. Actually that FAQ should one day be shortened. Was a bad habit to add stuff there that does not fit elsewhere.

[TNT_BOM_BOM]

Was a bad habit to add stuff there that does not fit elsewhere

oh thought that u mean it to do this because (i thought) u needed the FAQ section cover most of common/good questions. so i followed ur style in this.

[Patrick]

Perhaps a FAQ. Where stuff that is really frequently asked. And a VFAQ.
A Virtual FAQ. Where random stuff goes that is good to know, that is not
really asked, but fits well into such useful-to-know list.

[TNT_BOM_BOM]

perfect idea.