Change the Administrator Password

Change the administrator password in Cortex XSOAR 6.13.

If the administrator cannot log in and does not know the password, you need to add a new administrator. You can then change the password for the current administrator.

To add a new administrator, create a one-time configuration (OTC) file that defines the user configuration. Then restart the Cortex XSOAR server. The OTC file is deleted automatically.

If the Cortex XSOAR server is deployed under a custom path, you also need to update the demisto.conf file.

To check the installation path, SSH to the Cortex XSOAR server and run the following command:

grep -i "data dir" /tmp/demisto_install.log

Locate the data-dir entry in the command output. For example:

time="2026-06-15T10:34:48+03:00" level=info msg="data-dir: /var/lib/demisto"

1

Create a new administrator

1. As the root user, create a /var/lib/demisto/otc.conf.json file with content similar to the following by using the touch (create) and vim (edit) commands.

   {
       "users": [
           {
               "username": "newadmin",
               "password": "veryStrongPassword1!",
               "email": "[e-mail]",
               "phone": "[phone]",
               "name": "New Admin Dude",
               "defaultAdmin": true,
               "roles": {
                   "demisto": [
                       "Administrator"
                   ]
               }
           }
       ]
   }

   The username needs to be a completely new user in the system. For example, if there was a newadmin username, it must be called something else, like newadmin2.

   Passwords must contain a number.

   If you do not want the new administrator to be the default administrator, remove defaultAdmin or change it to false.
2. Save the file.
3. Ensure the file has demisto:demisto ownership by typing the following command:

   chown demisto:demisto /var/lib/demisto/otc.conf.json

2

Update the demisto.conf file (Optional)

If the Cortex XSOAR server is deployed under a custom path, update the demisto.conf file.

1. Create a backup copy of the demisto.conf file.
2. Edit the demisto.conf file by adding the following keys and values:

   "Server": {
   "HttpsPort": "443",
   "ProxyMode": true,
   "OneTimeConfPath": "/DATA/var/lib/demisto/otc.conf.json"
   },

   The custom path above is /DATA/var/lib/ where demisto is installed. The provided path is an example.

   The comma after true, must be added.

3

Restart Cortex XSOAR

Restart Cortex XSOAR by running the following command:

systemctl restart demisto

The file is removed when Cortex XSOAR restarts.

4

Log in with the new administrator

Log in to Cortex XSOAR by using the new administrator credentials created in step 1.

In this example, the username is newadmin , and the password is veryStrongPassword1!.

5

Change the current administrator’s password

1. Go to Settings → USERS AND ROLES → Users, select the current administrator checkbox, and click Reset P/W.
2. Change the new password as required, and click Save.
3. Log out of Cortex XSOAR.

6

Remove the new administrator

(Optional) Remove the new administrator you created in step 1.

1. Log in to Cortex XSOAR using the current administrator credentials, including the new password.
2. Go to Settings → USERS AND ROLES → Users, select the new administrator checkbox, and click Remove.

   If the new administrator is also a default administrator, you can remove the user by selecting the user, clicking Roles, and unchecking the Set as Default Admin checkbox.