PWQuality: Linux password annoyances

Andrewgoh
2 min readDec 11, 2020

Various Linux distributions uses password complexity checks. This becomes an annoyance as each time you try to change passwords after the 3 prompts old password and 2 new passwords (repeated), it fails password complexity checks.

if you were to search the web (say google) you’d find various threads topics including how to disable password complexity checks e.g.

Apparently there are a couple of password complexity check modules / schemes in use. among them are pam_unix (using obscure option), cracklib and pwquality. There are probably more. To check if pwquality is used for Ubuntu based distributions, check in /etc/pam.d/common-password


password requisite pam_pwquality.so
password [success=x default=ignore] pam_unix.so obscure sha512

If an entry for pwquality is there chances are that pwquality is in use. It apparently can be disabled by commenting the line or running pam-auth-update. To remove all forms of complexity checks you’d also need to…

--

--