Password Management

Agent password composition and management

For historical reasons, the agent password consists of two parts:

  • Part 1: Generated by the agent at each start and sent to the server through the control socket.
  • Part 2: It is stored only locally on the agent.

The second part can be generated through different methods:

1. At compile-time

When compiling an agent through the client (see client/compilation), the generated password is displayed either in the standard output during compilation or in the .env file that contains all the variables set for the agent.

2. At run-time

If no password has been set at compile-time, a random password will be generated and displayed in the agent log.

3. Via configuration

If a password is explicitly provided, it takes precedence over the compile-time and run-time generated passwords and will be used instead.
(See general/variables for configuration options.)