Linux

How to List Users in Linux

Managing users is an essential part of Linux system administration. Knowing how to list all users helps you monitor system access, manage permissions, and ensure security. In Linux, user information is stored in specific system files, and several commands can be used to view this data.

Check Users from the /etc/passwd File

All local users are recorded in the /etc/passwd file. To list them, use:

cat /etc/passwd

Each line in the output represents a user account, including both system and human users. The first field before the colon : is the username. To view only usernames, run:

cut -d: -f1 /etc/passwd

Using the getent Command

getent retrieves entries from administrative databases, including user data. It’s a more flexible method that also includes users managed via network services like LDAP.

getent passwd

To display only the usernames:

getent passwd | cut -d: -f1

Listing Logged-In Users

If you need to see currently active users, use:

who

or

w

These commands display who is logged in, their login time, and what they are doing.

Using compgen Command

The compgen command quickly lists all users and groups:

compgen -u

It outputs a simple list of usernames, making it easy to scan through accounts.

View Groups and Root User

To list all groups, use:

getent group | cut -d: -f1

To verify if a root user exists:

grep root /etc/passwd

Conclusion

Knowing how to list users in Linux helps you audit accounts and maintain secure access control. Whether through /etc/passwd, getent, or compgen, these commands are reliable for system management and troubleshooting.

0xSnow

0xSnow is a cybersecurity researcher with a focus on both offensive and defensive security. Working with ethical hacking, threat detection, Linux tools, and adversary simulation, 0xSnow explores vulnerabilities, attack chains, and mitigation strategies. Passionate about OSINT, malware analysis, and red/blue team tactics, 0xSnow shares detailed research, technical walkthroughs, and security tool insights to support the infosec community.

Recent Posts

How to Prevent Software Supply Chain Attacks

What is a Software Supply Chain Attack? A software supply chain attack occurs when a…

1 week ago

How UDP Works and Why It Is So Fast

When people ask how UDP works, the simplest answer is this: UDP sends data quickly…

3 weeks ago

How EDR Killers Bypass Security Tools

Endpoint Detection and Response (EDR) solutions have become a cornerstone of modern cybersecurity, designed to…

3 weeks ago

AI-Generated Malware Campaign Scales Threats Through Vibe Coding Techniques

A large-scale malware campaign leveraging AI-assisted development techniques has been uncovered, revealing how attackers are…

3 weeks ago

How Does a Firewall Work Step by Step

How Does a Firewall Work Step by Step? What Is a Firewall and How Does…

3 weeks ago

Fake VPN Download Trap Can Steal Your Work Login in Minutes

People trying to securely connect to work are being tricked into doing the exact opposite.…

4 weeks ago