.. meta::
   :keywords: default password meltdown spectre

.. _l5_security:

Security
========


.. _l5_default_password:

Passwords
---------

By default, the Librem 5 uses the password ``123456`` for the:

 * Disk encryption password (used to unlock the data on the phone)
 * Lock screen PIN
 * User password

.. raw:: html

    <video width="80%" controls>
        <source src="https://videos.puri.sm/shorts/passwords.mp4" type="video/mp4">
        <source src="https://videos.puri.sm/shorts/passwords.webm" type="video/webm">
        Your browser does not support HTML video.
    </video>


Lock screen/Admin
-----------------

See :ref:`Changing the Settings <l5_settings>` for full steps to update the lock screen/user password.
Quick setup under: **Settings** → **Details** → **Users** → **Password**


GNOME Keyring
-------------

The last password you'll need to set up is for Gnome Keyring.

.. image:: ../images/passwords/gnome_keyring.png
   :scale: 100%
   :align: center
   :class: no-scaled-link

This is where user account data is stored.
All credentials are encrypted at rest.
When attaching to a service like Nextcloud, you will automatically be prompted to create the new keyring.
Similar to your main encryption password, it is good practice to record these in a secure password manager.
If you do not already use a password manager, :ref:`passwordsafe <l5_app_password_safe>` is simple to use and in our software store.


.. _l5_vulnerability:

Meltdown/Spectre vulnerability
------------------------------

The Librem 5 and Liberty phones are not vulnerable to Meltdown or Spectre as they are based on an i.MX 8M chipset.