Password authentication
Manage username/password authentication settings and user password reset workflows
On this page
Coder has password authentication enabled by default. The account created during setup is a username/password account.
Disable password authentication
To disable password authentication, use the
CODER_DISABLE_PASSWORD_AUTH
flag on the control plane.
This blocks password sign-in and password resets for all users, including owners. Before you enable it, make sure at least one owner can sign in through your identity provider.
Restore the Owner user
If you remove the admin user account (or forget the password), you can run the
coder server create-admin-usercommand
on your server. If password authentication is disabled, unset
CODER_DISABLE_PASSWORD_AUTH and restart the server first, or the new admin
will not be able to sign in.
Important
You must run this command on the same machine running the control plane. If you are running Coder on Kubernetes, this means using kubectl exec to exec into the pod.
Reset a user's password
An admin must reset passwords on behalf of users. This can be done in the web UI
in the Users page or CLI:
coder reset-password