# Remote Engine users and passwords

The default security configuration uses a property file located at <RemoteEngineInstallationDirectory>/etc/users.properties to store authorized users and their passwords.

The users authenticate access to the SSH console, the Karaf JMX management layer, and the Karaf console. These access paths delegate to the same JAAS-based security authentication. Keeping the default credential unchanged can be risky for a production environment. For further information on the default credential behaviors, see [Changing the default Remote Engine password](https://help.qlik.com/talend/en-US/remote-engine-user-guide-linux/Cloud/changing-the-default-engine-password "Change the default Talend Remote Engine credential to enable secure interactive access to the Karaf console and other tools.").

The users.properties file contains one or more lines. Each line defines a user, its password, and the associated roles.

```
user=password[,role][,role]...
```

After the Remote Engine starts, the password is encrypted. By default, the encryption is based on Jasypt, using the salted SHA-256 algorithm. To modify these settings, edit the <RemoteEngineInstallationDirectory>/etc/org.apache.karaf.jaas.cfg file. For more information, see the [Karaf security configuration page](https://karaf.apache.org/manual/latest/security).

### In this section

* [Changing the default Remote Engine password](https://help.qlik.com/talend/en-US/remote-engine-user-guide-linux/Cloud/changing-the-default-engine-password)

**Related tasks**

* [Enabling remote access using SSH (optional)](https://help.qlik.com/talend/en-US/remote-engine-user-guide-linux/Cloud/enabling-remote-access-using-ssh-optional "By default, only localhost has SSH access to Talend Remote Engine. To enable remote access from other machines, change the SSH host binding in the configuration file.")
* [Enabling JMX for Talend Remote Engine (optional)](https://help.qlik.com/talend/en-US/remote-engine-user-guide-linux/Cloud/enabling-remote-access-using-jmx-optional "Starting with Talend Remote Engine v2.14.1, JMX monitoring is turned off by default. Enable it to monitor Talend Remote Engine locally or to configure remote JMX access from other machines.")
* [Enabling remote access using HTTP (optional)](https://help.qlik.com/talend/en-US/remote-engine-user-guide-linux/Cloud/enabling-remote-access-using-http-optional "To access Talend Remote Engine using HTTP, you need to edit the configuration file.")