Datatypes

Unix shadow password file entry

ID unix_shadow_entry

DatatypePersonal data (PII)identifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

One line of /etc/shadow on Linux and other Unix systems: nine colon-separated fields with the login name, the hashed password (or ! or * for a locked account), and the password ageing and expiry dates, counted in days since 1970-01-01.

Categories
Secrets and credentials (passwords, keys, tokens)
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
85/100 · missing: mapping (Wikidata, Schema.org, ...), translation
Metacrafter rules
no detection rule yet
Supported by tools
Semgrep

Regular expression

^[^:\s]+:[^:\s]*:[0-9]*:[0-9]*:[0-9]*:[0-9]*:[0-9]*:[0-9]*:[^:\s]*$

Python re syntax.

Examples

ValueDescription
daemon:*:19000:0:99999:7:::System account without a password
example:$1$examples$9syBlMva027I.Vd2Z0JGl1:19000:0:99999:7:::MD5-crypt hash of the word "example"
root:x:0:0:root:/root:/bin/bash invalidLine of /etc/passwd, which has seven fields

Sources

Use this record