gpasswd Command

Manage group passwords and group membership to control access to groups and allow users to join groups with authentication.

Syntax

gpasswd [options] group gpasswd -a user group gpasswd -d user group gpasswd -M user1,user2,user3 group gpasswd -r group

The gpasswd command manages group passwords and group membership, allowing users to join groups with a password and administrators to control group access.

Basic Usage

Set group password

# Set a password for a group gpasswd developers gpasswd admins # Remove group password gpasswd -r developers gpasswd -r admins # Set password for multiple groups for group in dev test prod; do gpasswd $group done

Set or remove passwords for groups to control access

Manage group membership

# Add user to group gpasswd -a username developers gpasswd -a john admins # Remove user from group gpasswd -d username developers gpasswd -d john admins # Set complete member list gpasswd -M user1,user2,user3 developers

Add or remove users from groups and manage group membership

Group administration

# Add group administrator gpasswd -A adminuser developers # Remove group administrator gpasswd -A "" developers # Set multiple administrators gpasswd -A "admin1,admin2" developers

Manage group administrators who can control group membership

Common Options

Membership management options

# Add user to group gpasswd -a username groupname # Remove user from group gpasswd -d username groupname # Set complete member list gpasswd -M user1,user2,user3 groupname # Add group administrator gpasswd -A adminuser groupname

Control group membership and administration

Password management options

# Set group password gpasswd groupname # Remove group password gpasswd -r groupname # Set password without prompt echo "password" | gpasswd groupname

Manage group passwords for access control

Information display options

# Show group information gpasswd -i groupname # Show group members gpasswd -l groupname # Show group administrators gpasswd -A groupname

Display information about groups and their configuration

Practical Examples

System administration tasks

# Create development team group groupadd developers gpasswd developers # Add team members gpasswd -a john developers gpasswd -a jane developers gpasswd -a bob developers # Set team lead as administrator gpasswd -A john developers # Create project groups for project in webapp mobile backend; do groupadd $project gpasswd $project done

Common administrative tasks using gpasswd

User management workflows

# Onboard new employee username="newuser" gpasswd -a $username developers gpasswd -a $username sudo gpasswd -a $username docker # Offboard employee username="olduser" gpasswd -d $username developers gpasswd -d $username sudo gpasswd -d $username docker # Bulk user management users="user1,user2,user3,user4" gpasswd -M $users testgroup

Manage user access to groups during onboarding and offboarding

Security and access control

# Secure sensitive group gpasswd -r admins # Remove password gpasswd -A "root,admin1" admins # Set admins only # Create temporary access group groupadd tempaccess gpasswd tempaccess # Set password gpasswd -a contractor tempaccess # Remove temporary access gpasswd -d contractor tempaccess groupdel tempaccess

Implement security policies and temporary access controls

Best Practices

gpasswd Best Practices
  • Use descriptive group names for clarity
  • Limit group administrators to trusted users
  • Regularly review group membership
  • Use group passwords sparingly for security
  • Document group purposes and policies
  • Combine with sudo for privilege management
Common Pitfalls
  • Security risks - Group passwords can be security vulnerabilities
  • Permission conflicts - Group membership may conflict with sudo rules
  • Orphaned groups - Remove empty groups to avoid confusion
  • Administrator abuse - Limit group administrator privileges
  • Complexity - Too many groups can become unmanageable

See also