---
title: elasticsearch-reset-password
description: The elasticsearch-reset-password command resets the passwords of users in the native realm and built-in users. Use this command to reset the password...
url: https://www.elastic.co/elastic/docs-builder/docs/3028/reference/elasticsearch/command-line-tools/reset-password
products:
  - Elasticsearch
applies_to:
  - Self-managed Elastic deployments: Generally available
---

# elasticsearch-reset-password
The `elasticsearch-reset-password` command resets the passwords of users in the native realm and built-in users.

## Synopsis

```shell
bin/elasticsearch-reset-password
[-a, --auto] [-b, --batch] [-E <KeyValuePair]
[-f, --force] [-h, --help] [-i, --interactive]
[-s, --silent] [-u, --username] [--url] [-v, --verbose]
```


## Description

Use this command to reset the password of any user in the native realm or any built-in user. By default, a strong password is generated for you. To explicitly set a password, run the tool in interactive mode with `-i`. The command generates (and subsequently removes) a temporary user in the [file realm](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/deploy-manage/users-roles/cluster-or-deployment-auth/file-based) to run the request that changes the user password.
<important>
  You cannot use this tool if the file realm is disabled in your `elasticsearch.yml` file.
</important>

This command uses an HTTP connection to connect to the cluster and run the user management requests. The command automatically attempts to establish the connection over HTTPS by using the `xpack.security.http.ssl` settings in the `elasticsearch.yml` file. If you do not use the default configuration directory location, ensure that the `ES_PATH_CONF` environment variable returns the correct path before you run the `elasticsearch-reset-password` command. You can override settings in your `elasticsearch.yml` file by using the `-E` command option. For more information about debugging connection failures, see [Setup-passwords command fails due to connection failure](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3028/troubleshoot/elasticsearch/security/trb-security-setup).

## Parameters

<definitions>
  <definition term="-a, --auto">
    Resets the password of the specified user to an auto-generated strong password. (Default)
  </definition>
  <definition term="-b, --batch">
    Runs the reset password process without prompting the user for verification.
  </definition>
  <definition term="-E <KeyValuePair>">
    Configures a standard Elasticsearch or X-Pack setting.
  </definition>
  <definition term="-f, --force">
    Forces the command to run against an unhealthy cluster.
  </definition>
  <definition term="-h, --help">
    Returns all of the command parameters.
  </definition>
  <definition term="-i, --interactive">
    Prompts for the password of the specified user. Use this option to explicitly set a password.
  </definition>
  <definition term="-s --silent">
    Shows minimal output in the console.
  </definition>
  <definition term="-u, --username">
    The username of the native realm user or built-in user.
  </definition>
  <definition term="--url">
    Specifies the base URL (hostname and port of the local node) that the tool uses to submit API requests to Elasticsearch. The default value is determined from the settings in your `elasticsearch.yml` file. If `xpack.security.http.ssl.enabled` is set to `true`, you must specify an HTTPS URL.
  </definition>
  <definition term="-v --verbose">
    Shows verbose output in the console.
  </definition>
</definitions>


## Examples

The following example resets the password of the `elastic` user to an auto-generated value and prints the new password in the console:
```shell
bin/elasticsearch-reset-password -u elastic
```

The following example resets the password of a native user with username `user1` after prompting in the terminal for the desired password:
```shell
bin/elasticsearch-reset-password --username user1 -i
```

The following example resets the password of a native user with username `user2` to an auto-generated value prints the new password in the console. The specified URL indicates where the elasticsearch-reset-password tool attempts to reach the local Elasticsearch node:
```shell
bin/elasticsearch-reset-password --url "https://172.0.0.3:9200" --username user2 -i
```