]> git.ipfire.org Git - thirdparty/openssl.git/blame - doc/man1/openssl-passwd.pod
Deprecate unprefixed manual entries for openssl commands
[thirdparty/openssl.git] / doc / man1 / openssl-passwd.pod
CommitLineData
bb325c7d
BM
1=pod
2
3=head1 NAME
4
b6b66573 5openssl-passwd - compute password hashes
bb325c7d
BM
6
7=head1 SYNOPSIS
8
9B<openssl passwd>
169394d4 10[B<-help>]
bb325c7d 11[B<-crypt>]
cc244b37 12[B<-1>]
e6e7b5f3 13[B<-apr1>]
037f2c3f 14[B<-aixmd5>]
2e04d6cc
RL
15[B<-5>]
16[B<-6>]
ad860603
BM
17[B<-salt> I<string>]
18[B<-in> I<file>]
e6e7b5f3 19[B<-stdin>]
db70a3fd 20[B<-noverify>]
bb325c7d
BM
21[B<-quiet>]
22[B<-table>]
3ee1eac2
RS
23[B<-rand file...>]
24[B<-writerand file>]
ad860603 25{I<password>}
bb325c7d
BM
26
27=head1 DESCRIPTION
28
e6e7b5f3
BM
29The B<passwd> command computes the hash of a password typed at
30run-time or the hash of each password in a list. The password list is
31taken from the named file for option B<-in file>, from stdin for
db70a3fd 32option B<-stdin>, or from the command line, or from the terminal otherwise.
cc244b37 33The Unix standard algorithm B<crypt> and the MD5-based BSD password
037f2c3f 34algorithm B<1>, its Apache variant B<apr1>, and its AIX variant are available.
bb325c7d
BM
35
36=head1 OPTIONS
37
38=over 4
39
169394d4
MR
40=item B<-help>
41
42Print out a usage message.
43
bb325c7d
BM
44=item B<-crypt>
45
46Use the B<crypt> algorithm (default).
47
cc244b37
BM
48=item B<-1>
49
50Use the MD5 based BSD password algorithm B<1>.
51
e6e7b5f3
BM
52=item B<-apr1>
53
cc244b37 54Use the B<apr1> algorithm (Apache variant of the BSD algorithm).
e6e7b5f3 55
037f2c3f
GN
56=item B<-aixmd5>
57
58Use the B<AIX MD5> algorithm (AIX variant of the BSD algorithm).
59
2e04d6cc
RL
60=item B<-5>
61
62=item B<-6>
63
64Use the B<SHA256> / B<SHA512> based algorithms defined by Ulrich Drepper.
65See L<https://www.akkadia.org/drepper/SHA-crypt.txt>.
66
ad860603 67=item B<-salt> I<string>
bb325c7d
BM
68
69Use the specified salt.
db70a3fd 70When reading a password from the terminal, this implies B<-noverify>.
bb325c7d 71
ad860603 72=item B<-in> I<file>
e6e7b5f3 73
ad860603 74Read passwords from I<file>.
e6e7b5f3
BM
75
76=item B<-stdin>
77
78Read passwords from B<stdin>.
79
db70a3fd
BM
80=item B<-noverify>
81
82Don't verify when reading a password from the terminal.
83
bb325c7d
BM
84=item B<-quiet>
85
e6e7b5f3 86Don't output warnings when passwords given at the command line are truncated.
bb325c7d
BM
87
88=item B<-table>
89
90In the output list, prepend the cleartext password and a TAB character
91to each password hash.
92
3ee1eac2
RS
93=item B<-rand file...>
94
95A file or files containing random data used to seed the random number
96generator.
97Multiple files can be specified separated by an OS-dependent character.
98The separator is B<;> for MS-Windows, B<,> for OpenVMS, and B<:> for
99all others.
100
101=item [B<-writerand file>]
102
103Writes random data to the specified I<file> upon exit.
104This can be used with a subsequent B<-rand> flag.
105
bb325c7d
BM
106=back
107
ad860603 108=head1 EXAMPLES
bb325c7d 109
dfee8626
RS
110 % openssl passwd -crypt -salt xx password
111 xxj31ZMTZzkVA
e6e7b5f3 112
dfee8626
RS
113 % openssl passwd -1 -salt xxxxxxxx password
114 $1$xxxxxxxx$UYCIxa628.9qXjpQCjM4a.
cc244b37 115
dfee8626
RS
116 % openssl passwd -apr1 -salt xxxxxxxx password
117 $apr1$xxxxxxxx$dxHfLAsjHkDRmG83UXe8K0
bb325c7d 118
dfee8626
RS
119 % openssl passwd -aixmd5 -salt xxxxxxxx password
120 xxxxxxxx$8Oaipk/GPKhC64w/YVeFD/
037f2c3f 121
e2f92610
RS
122=head1 COPYRIGHT
123
b6b66573 124Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.
e2f92610 125
449040b4 126Licensed under the Apache License 2.0 (the "License"). You may not use
e2f92610
RS
127this file except in compliance with the License. You can obtain a copy
128in the file LICENSE in the source distribution or at
129L<https://www.openssl.org/source/license.html>.
130
131=cut