In Tails, an administration password (also called root password or amnesia password) is required to perform system administration tasks. For example:

Authentication required: amnesia password (also called *administration password* or *root password*)

Security implications of setting up an administration password

For better security, no administration password is set up by default.

When you set up an administration password, an attacker who can get physical access to your computer while Tails is running could be able to break your security and:

  • Monitor all your activity - Reveal your IP address - Access all the data in your Persistent Storage - Read and write data on the internal hard disk of the computer - Install such vulnerabilities permanently on your Tails USB stick

To learn your administration password, an attacker could watch your keyboard while you type, for example looking over your shoulders or through a video surveillance camera.

To prevent such an attack:

  • Hide your keyboard while typing your administration password in public spaces. - Never leave your computer unattended while running Tails. - Learn how to shut down Tails quickly in case of emergency.

Ein Administrationspasswort einstellen

In order to perform administration tasks, you need to set up an administration password when starting Tails, using the Welcome Screen.

  1. When the Welcome Screen appears, click on the Add Additional Setting button.

  2. Choose Administration Password in the Additional Settings dialog.

  3. Geben Sie in den Feldern Administrationspasswort und Bestätigen ein Passwort Ihrer Wahl an und klicken Sie anschließend auf Hinzufügen.

For security, it is impossible to set up an administration password after starting Tails. Otherwise, a compromised application could bypass some of the security built in Tails.

Ein Root-Terminal öffnen

Um ein Root-Terminal während Ihrer Arbeitssitzung zu öffnen, können Sie Folgendes tun:

  • Choose Applications ▸ System Tools ▸ Root Terminal.

  • Führen Sie den Befehl sudo -i in einem Terminalfenster aus.