# Password Authentication

Coder has password authentication enabled by default. The account created during
setup is a username/password account.

## Disable password authentication

To disable password authentication, use the
[`CODER_DISABLE_PASSWORD_AUTH`](/docs/@v2.33.6/reference/cli/server/#--disable-password-auth)
flag on the Coder server.

## Restore the `Owner` user

If you remove the admin user account (or forget the password), you can run the
[`coder server create-admin-user`](/docs/@v2.33.6/reference/cli/server_create-admin-user/)command
on your server.

<Callout type="idea" title="Important">
  You must run this command on the same machine running the Coder server.
  If you are running Coder on Kubernetes, this means using
  [kubectl exec](https://kubernetes.io/docs/reference/kubectl/generated/kubectl_exec/)
  to exec into the pod.
</Callout>

## Reset a user's password

An admin must reset passwords on behalf of users. This can be done in the web UI
in the Users page or CLI:
[`coder reset-password`](/docs/@v2.33.6/reference/cli/reset-password/)