Linux

How to List Users in Linux

Managing users is an essential part of Linux system administration. Knowing how to list all users helps you monitor system access, manage permissions, and ensure security. In Linux, user information is stored in specific system files, and several commands can be used to view this data.

Check Users from the /etc/passwd File

All local users are recorded in the /etc/passwd file. To list them, use:

cat /etc/passwd

Each line in the output represents a user account, including both system and human users. The first field before the colon : is the username. To view only usernames, run:

cut -d: -f1 /etc/passwd

Using the getent Command

getent retrieves entries from administrative databases, including user data. It’s a more flexible method that also includes users managed via network services like LDAP.

getent passwd

To display only the usernames:

getent passwd | cut -d: -f1

Listing Logged-In Users

If you need to see currently active users, use:

who

or

w

These commands display who is logged in, their login time, and what they are doing.

Using compgen Command

The compgen command quickly lists all users and groups:

compgen -u

It outputs a simple list of usernames, making it easy to scan through accounts.

View Groups and Root User

To list all groups, use:

getent group | cut -d: -f1

To verify if a root user exists:

grep root /etc/passwd

Conclusion

Knowing how to list users in Linux helps you audit accounts and maintain secure access control. Whether through /etc/passwd, getent, or compgen, these commands are reliable for system management and troubleshooting.

0xSnow

0xSnow is a cybersecurity researcher with a focus on both offensive and defensive security. Working with ethical hacking, threat detection, Linux tools, and adversary simulation, 0xSnow explores vulnerabilities, attack chains, and mitigation strategies. Passionate about OSINT, malware analysis, and red/blue team tactics, 0xSnow shares detailed research, technical walkthroughs, and security tool insights to support the infosec community.

Recent Posts

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

7 days ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

7 days ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

1 week ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

2 weeks ago

ufw Command in Linux: Manage Firewall Rules with Examples

ufw (Uncomplicated Firewall) sits on top of iptables (or nftables on newer systems) and replaces…

2 weeks ago

who Command in Linux: Show All Logged-In Users and Sessions

When you share a server with a team or investigate unexpected activity, the first question…

2 weeks ago