oz0 user password

Set a new password and sign the user out everywhere; without --password-stdin one is generated.

For: Operators and developers looking up a command.

Set a new password and sign the user out everywhere; without --password-stdin one is generated. A cluster admin sets anyone's. Your own account's password changes, or is removed, only with proof that you are its person: your current password (--current-password-stdin) and, when the account has a second factor, a code from it (--code).

Usage

oz0 user password NAME [flags]

Flags

FlagTypeDefaultDescription
--codestringyour own account: a code from its second factor (the authenticator app, or a recovery code)
--current-password-stdinboolyour own account: read your current password from stdin (the line after the new one with --password-stdin)
--password-stdinboolread the password from stdin instead of generating one
--removeboolremove the password: the account then signs in only through an identity provider, and its next sign-in there links it

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026