# Changing the default Remote Engine password

Change the default Talend Remote Engine credential to enable secure interactive access to the Karaf console and other tools.

## About this task

Ensure to change the default credential in the following situations:

* You do not have the password that was generated during installation or during first startup. The default credential behavior depends on the installation method and version:
  | Installation method | Default credential behavior |
  | --- | --- |
  | Installer-based, v2.13.13 and later | Random password generated during installation, printed to the console.<br><br>To ensure this generation, select the Set strong password<br>for default SSH user checkbox to automatically create a<br>strong password for SSH communication with Talend Remote Engine<br><br><br>. Otherwise, tadmin is used. For more information,<br>see [Installing the Remote Engine<br>automatically](https://help.qlik.com/talend/en-US/installation-guide-linux/Cloud/installing-remote-engine-automatically). |
  | Installer-based, before v2.13.13 | Static default tadmin. Must be changed. |
  | Archive-based, v2.14.1 and later | Random password generated on first startup, printed to the console in the<br>following format:<br><br>```<br>default engine password 'tadmin' has been replaced with <generated-password><br>``` |
  | Archive-based, before v2.14.1 | Static default tadmin. Must be changed. |
* You are using tadmin as the default credential in an installer-based installation before v2.13.13 or an archive-based installation before v2.14.1. For security reasons, change the default credential before using the engine in production.

## Procedure

1. Open the &lt;RemoteEngineInstallationDirectory&gt;/etc/users.properties file in a text editor.
2. Locate the line for the default user.
   | Password state | Line format |
   | --- | --- |
   | Not yet encrypted | tadmin = tadmin,\_g\_:admingroup |
   | Already encrypted | tadmin = {CRYPT}212E67DAB3D7355B2BC74F76B59213EAA9F021955B26F2158E6D6F1A653089ECDDF6A12AEE229CF1{CRYPT},\_g\_:admingroup |
3. Replace the password value with a new strong password.

   In both cases, replace the password field, whether plain text or the {CRYPT}...{CRYPT} block, with your new plain text password.
4. Save the file.

   If the engine is running when you make this change, the password is automatically encrypted after saving. Otherwise, the encryption occurs when the engine starts. For example:
   ```
   tadmin = {CRYPT}6BA00DCABFDDDE0F9A96B4CA68C13DBEE23597E5925656680C501889C4A554604201B37069754392{CRYPT},_g_:admingroup
   ```

## Results

The default credential is updated. Use it for tasks such as connecting to the Karaf console or extracting Karaf dumps.