Understanding usernames and how attackers may use them to attack your system

Username Security - removing the default username

The Raspberry Pi has traditionally used the pi username. In response to some countries placing restrictions on default credentials on devices, Raspberry Pi have now dropped that default user. Instead during first run you will be prompted to enter a username as well as to change the password.

In the video below I discuss the pros and cons and discuss whether it really does provide additional level of security and whether that is worth paying for the lack of convenience.

Transcript: Raspberry Pi default Username - Video Transcript

Application Changes to remove default pi username

This video on the Penguin Tutor YouTube channel shows how I modified software to allow it be used on the new version of the Raspberry Pi OS without the default pi username.

For more details about how username and password security work on Linux systems see the following guides:

• Guide to creating secure passwords to protect against hackers
• Understanding the Linux passwd and shadow files
• Understanding password hacking with example using John the Ripper
• Linux user administrator reference guide to usernames