Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Sign up
Appearance settings

Encrypted Passwords #7233

Answered by code-asher
tonybourke asked this question in Q&A
Discussion options

I'm not wild about the password being in plain text in the ~/.config/code-server/config.yaml file. I can't seem to find any options for encrypting this password, or did I miss something?

Another thought is to run it through Nginx and try doing a PAM authentication module (code-server is running on AlmaLinux). Has anyone had any luck with that?
You must be logged in to vote

You can use hashed_password instead of password.

Replies: 2 comments 4 replies

Comment options

You can use hashed_password instead of password.
You must be logged in to vote
4 replies
Comment options

Oops, in the yaml it would be hashed-password (dash not underscore).

You can also use a HASHED_PASSWORD environment variable.

code-server/docs/FAQ.md

Lines 341 to 364 in db5f99d

## Can I store my password hashed?
Yes, you can do so by setting the value of `hashed-password` instead of `password`. Generate the hash with:
```shell
echo -n "thisismypassword" | npx argon2-cli -e
$argon2i$v=19$m=4096,t=3,p=1$wst5qhbgk2lu1ih4dmuxvg$ls1alrvdiwtvzhwnzcm1dugg+5dto3dt1d5v9xtlws4
```
Replace `thisismypassword` with your actual password and **remember to put it
inside quotes**! For example:
```yaml
auth: password
hashed-password: "$argon2i$v=19$m=4096,t=3,p=1$wST5QhBgk2lu1ih4DMuxvg$LS1alrVdIWtvZHwnzCM1DUGg+5DTO3Dt1d5v9XtLws4"
```
The `hashed-password` field takes precedence over `password`.
If you're using Docker Compose file, in order to make this work, you need to change all the single $ to $$. For example:
```yaml
- HASHED_PASSWORD=$$argon2i$$v=19$$m=4096,t=3,p=1$$wST5QhBgk2lu1ih4DMuxvg$$LS1alrVdIWtvZHwnzCM1DUGg+5DTO3Dt1d5v9XtLws4
```
Comment options

Is there a different way to make that hash? The command specified throws out all kinds of deprecation warnings, including:

inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
Comment options

Oh interesting yeah looks like argon2-cli has not been updated in quite some time. I think the hashes it generates are still probably going to be valid for code-server, but maybe a better way is to install argon2 without npm. This will depend on your operating system, but I believe Ubuntu for example has argon2 in their package repositories.
Comment options

I couldn't find an Alma binary for 9.x, not even in elrepo, so I made a quick Python script using the argon2-cffi module and that works pretty well.
Answer selected by tonybourke
Comment options

Awesome, thanks!
You must be logged in to vote
0 replies
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet

AltStyle によって変換されたページ (->オリジナル) /