---
title: Changing the administrative password
description: Users that authenticate to the Configuration API or the admin console are stored in cn=RootDNs,cn=config. The setup tool automatically creates one administrative account when performing an installation. Accounts can be added or changed with the dsconfig tool.
component: pingdirectory
version: 11.0
page_id: pingdirectory:pingdatasync_server_administration_guide:pd_sync_change_admin_password
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/pingdatasync_server_administration_guide/pd_sync_change_admin_password.html
revdate: September 13, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Changing the administrative password

Users that authenticate to the Configuration API or the admin console are stored in `cn=RootDNs,cn=config`. The `setup` tool automatically creates one administrative account when performing an installation. Accounts can be added or changed with the `dsconfig` tool.

## About this task

Root users are governed by the Root Password Policy and by default, their passwords never expire. However, if a root user's password must be changed, use the `ldappasswordmodify` tool.

## Steps

1. Open a text editor and create a text file containing the new password. In this example, name the file rootuser.txt.

   ```shell
   $ echo password > rootuser.txt
   ```

2. Use `ldappasswordmodify` to change the root user's password.

   ```shell
   $ bin/ldappasswordmodify --port 1389 --bindDN "cn=Directory Manager" \
   --bindPassword secret --newPasswordFile rootuser.txt
   ```

3. Remove the text file.

   ```shell
   $ rm rootuser.txt
   ```