The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →To create an SSH-capable account in Webmin, open System → Users and Groups, select Create a new user, give the account a home directory, choose an installed interactive shell such as /bin/bash, set its password and groups, and click Create. The account can then use SSH only if the SSH daemon permits that user and the selected authentication method.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
Webmin creates a normal Unix account; it does not bypass the server’s SSH policy. The shell, home-directory ownership, group membership, password or key settings, and any SSH group restrictions all determine whether a connection succeeds.
As an Amazon Associate I earn from qualifying purchases.
What Webmin creates—and what actually grants SSH access
The Users and Groups module manages the same Unix account properties used by local logins and network services. A new account has a login name, password settings, home directory, login shell, primary group, and optional secondary groups. Webmin records those values in the operating system’s user and group configuration; SSH then applies its own authentication and access rules.
Webmin’s documentation says that after you click Create, the new Unix user can log in through SSH, telnet, and other services configured on the system. That statement assumes the SSH server allows the account, the account has a usable authentication method, and its shell is not deliberately non-interactive.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Plan the account before opening Webmin
Decide what the account is for before entering values. A human administrator who needs a command-line session needs an interactive shell and a home directory. A service identity may need a restricted or no-login shell instead. Group membership should reflect the files and services the user must access, not simply copy another administrator’s privileges.
Choose the authentication method
- Password authentication: Set a password in Webmin when the SSH daemon permits password logins and the user will authenticate interactively.
- Public-key authentication: Use an SSH key pair when the server permits public-key authentication. The client must retain the private key, while the account receives the matching public key in its SSH authorization file.
- Both methods: You can configure a password and a key, but the effective choices still depend on the SSH server policy.
Choose an access boundary
Determine the home-directory base, approved shell paths, primary group, and any secondary groups in advance. If another Webmin administrator will create accounts, define these boundaries before delegating the module so that account creation cannot silently grant broader access.
Step-by-step: create the Unix account in Webmin
-
Sign in with an account allowed to manage Unix users
Log in to Webmin using an administrator account that has permission to manage the Users and Groups module. A Webmin login without that module’s rights will not be able to create the account, even if the underlying Unix account would otherwise be permitted.
-
Open Users and Groups
Go to System → Users and Groups. This module displays existing Unix users and groups and provides the account-creation form.
-
Start a new-user record
Click Create a new user. Webmin opens fields for identity, numeric ID, home directory, shell, password and expiry, groups, and optional accounts in other modules.
-
Enter the login and real name
Enter the account’s login name and real name. The login name is the identifier used at the SSH prompt. Use a consistent naming policy that distinguishes people from service accounts. Leave User ID unchanged unless you have a specific, documented UID requirement; Webmin normally allocates an available UID automatically.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy. -
Create the home directory
For Home directory, use Webmin’s Automatic option when it is available, or enter an explicit path such as
/home/example. Enable Create home directory?. Without a home directory, an interactive SSH session may start in a missing path and tools that expect a writable home can fail.Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Enable Copy files to home directory? when the account should receive the standard skeleton files, commonly copied from
/etc/skel. Skeleton files can provide the initial shell configuration and other defaults used by your system. Do not copy them merely because the account exists; a tightly restricted service account may not need a normal interactive environment. -
Select the login shell
Choose an installed shell from the Shell menu. For a normal interactive SSH session, select a shell such as
/bin/bash. Webmin defines this field as the program run for text-mode logins, including SSH.Do not select
/bin/falsefor a user who must obtain a shell. That program exits immediately, so SSH authentication may complete but the session closes instead of presenting a command prompt. A non-interactive shell can be appropriate for an account intended only for a narrowly defined service, but it is not an SSH terminal shell.Recommended Free Tools
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy. -
Configure the password and expiry policy
Set a password if password authentication is allowed and the account needs one. Complete the maximum-days, warning-days, and inactive-days fields when the account must expire or become disabled on a schedule. These controls let you enforce a lifecycle rather than leaving a temporary account valid indefinitely.
Match the expiry values to the account’s purpose. A short-lived contractor account may need a defined maximum age and an inactivity period; a long-lived service identity may require a different policy or key-only access. The values affect password validity and account usability; they do not override an SSH daemon rule that denies the user.
-
Assign the primary group
Select a Primary group. This group becomes the account’s default group for newly created files and is part of the user’s baseline access. Choose the least-privileged group that matches the user’s work.
-
Add only necessary secondary groups
Use Secondary groups for additional shared-file or service access. Group membership controls access to files and other resources, so adding broad administrative groups can grant more authority than intended. If the user does not need a resource, do not add the corresponding group simply for convenience.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchSpecial offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
-
Decide whether to create linked module accounts
If configured Webmin modules need a matching identity, enable Create user in other modules?. Webmin documents integrations such as Samba and MySQL. Select this only when the related service account is genuinely required; creating extra identities can expand the account’s reach and complicate later removal.
-
Create the account
Review the login name, home path, shell, password policy, and groups, then click Create. Webmin creates the Unix account with those properties. The user can now attempt SSH using the configured password or key, subject to the SSH server’s authentication and authorization settings.
Which shell should an SSH user have?
The shell field is the most common reason a newly created account cannot maintain an interactive SSH session. SSH launches the account’s configured login shell after authentication. An installed interactive shell, such as /bin/bash, reads the session request and provides a command prompt. A shell such as /bin/false exits immediately by design.
| Account purpose | Shell choice | Expected SSH behavior |
|---|---|---|
| Human administrator or operator | Installed interactive shell such as /bin/bash |
Interactive command session, provided SSH policy permits the user |
| Account that must not receive a terminal | Non-interactive shell such as /bin/false |
Shell login is prevented because the program exits |
| Restricted service identity | An approved restricted shell available on the host | Behavior depends on that shell’s restrictions and the SSH server configuration |
Select only a path that is installed on the server. If a shell is absent or incorrectly entered, authentication can succeed while session startup fails. When troubleshooting, check the shell before changing passwords or regenerating keys.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Home directories, ownership, and skeleton files
Use Automatic home-directory allocation when you want Webmin to follow its normal account path, or specify a path such as /home/example when your layout requires a known location. Always enable Create home directory? for a normal SSH user.
The home directory is the user’s working location and the usual place for per-user SSH configuration. It must exist and be owned correctly by the new account. Incorrect ownership or permissions can prevent the SSH server from accepting key-based authentication even when the key itself is valid. If login fails, verify the path and ownership before assuming the account’s password is wrong.
Copy files to home directory? controls whether Webmin copies the system’s skeleton files, commonly from /etc/skel. Enable it when the user needs the standard shell startup files and login environment. Leave it off for an account that should have a minimal or deliberately empty home directory.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Password authentication and expiry settings
A password entered in Webmin is useful only if the SSH daemon allows password authentication. If the server is configured for key-only access, a correct password will not make SSH accept the account. Conversely, setting an expiry policy can intentionally stop password use after the configured period.
Use the maximum, warning, and inactive-day fields to express the account’s lifecycle:
- Maximum days: Limits how long the password remains valid before it must be changed.
- Warning days: Gives advance notice that password expiry is approaching.
- Inactive days: Controls what happens after a password has expired and the account remains unused.
Document the reason for unusual values. A temporary account should have an explicit end-of-life plan, while a permanent account should be reviewed periodically rather than assigned an arbitrary short period that causes unexpected lockouts.
Primary and secondary groups: access without accidental privilege
The primary group establishes the user’s default group context and commonly affects ownership of new files. Secondary groups add access to shared directories and services. Together, they can determine whether the user can read, modify, or execute resources beyond the home directory.
Start with the smallest set that supports the job. Add a secondary group only after identifying the resource it unlocks. Review the resulting membership after creation, especially when the account was copied conceptually from an existing administrator. A valid SSH login does not imply that every group assignment is safe.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsGenerate SSH keys for the new account through Webmin
Webmin can automate key setup. Open the SSH Server module and choose User SSH Key Setup. Enable Setup SSH key for new Unix users. Webmin can copy the generated public key into the user’s authorized_keys file and offers an option to use the account password as the key passphrase.
Key authentication still has two separate requirements:
- The client must possess the corresponding private key. A public key copied to the server is not sufficient by itself.
- The SSH daemon must permit public-key authentication for the account. A key cannot bypass a server-wide or group-based denial.
Protect the private key on the client and record who controls it. If the key is lost, remove its public-key entry or create a replacement through your established administration process. If the account should be key-only, ensure password authentication is not being relied on as a fallback.
Why the new user cannot log in over SSH
Troubleshoot in the order SSH evaluates the account. Change one condition at a time so you can identify the cause.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →1. The shell is non-interactive or unavailable
Return to System → Users and Groups and inspect Shell. Replace /bin/false with an installed interactive shell such as /bin/bash when the user needs a terminal. A shell that is not present on the host can also prevent session startup.
2. The home directory is missing or incorrectly owned
Confirm that the configured home path exists, was created by Webmin, and belongs to the new account with appropriate permissions. If skeleton files were expected, check that they were copied during creation. An incorrect path or ownership can break key lookup and session initialization.
3. The authentication method does not match the server policy
For password login, verify that a password was set and that password authentication is allowed by the SSH daemon. For key login, verify that the client is using the matching private key, the public key was copied to authorized_keys, and public-key authentication is enabled.
4. Group-based SSH rules deny the account
Open Webmin’s SSH Server settings and inspect group-based controls. Webmin documents rules that allow or deny members of specified groups. A user can have a valid password, a correct shell, and a matching key yet still be refused because membership triggers an SSH restriction.
5. The account was created with unintended restrictions
Review the final group list, password-expiry fields, shell, and home directory together. A temporary expiry, an overly restrictive shell, or membership in a denied group can look like an authentication failure until the account record is examined as a whole.
Delegating user creation safely in Webmin
A non-root Webmin administrator does not need unrestricted control over every Unix account. The Users and Groups module supports limits for allowed groups, allowed shells, UID ranges, and home-directory boundaries.
A practical delegation policy is to:
- Permit creation only in a dedicated, non-privileged group.
- Restrict the shell list to approved paths, excluding shells that would provide unintended access.
- Constrain home directories to a dedicated base directory.
- Set an approved UID range so delegated accounts cannot claim sensitive system IDs.
- Review whether linked accounts in other modules are allowed at all.
These controls separate the ability to create a routine account from the ability to create an account with broad system privileges. Test the delegated role with a non-production account before assigning it to staff.
Settings comparison for multiple accounts
| Decision | Option A | Option B | Use A when… |
|---|---|---|---|
| Shell | Interactive shell such as /bin/bash |
Non-interactive shell such as /bin/false |
The user needs a terminal |
| Authentication | Password | Public key | The SSH daemon permits the chosen method and the user can protect its credential |
| Home path | Webmin Automatic | Explicit path such as /home/example |
You want Webmin’s normal layout |
| Home contents | Copy skeleton files | Do not copy them | The account needs the standard login environment |
| Group scope | Primary group only | Primary plus selected secondary groups | No shared-resource access is required |
| Account lifetime | Default password policy | Maximum, warning, and inactive-day limits | The account has a defined expiry or inactivity requirement |
| SSH eligibility | No group restriction | Allow/deny rules based on group | The server’s SSH policy explicitly permits the account’s groups |
Post-creation verification checklist
- Confirm the login name and real name are correct.
- Confirm Webmin assigned the intended UID; leave automatically assigned values unchanged unless a documented requirement exists.
- Verify the home directory exists at the expected path and is owned correctly.
- Check whether skeleton files were copied when a standard environment was required.
- Confirm the shell is installed and matches the intended interactive or non-interactive purpose.
- Review the password and expiry fields against the account’s lifecycle.
- Review primary and secondary groups for least-privilege access.
- If keys were configured, verify the public key is authorized and the client has the matching private key.
- Inspect SSH group-based allow and deny rules.
- Test the account using the exact authentication method it is expected to use.
Bottom line
Creating the account is straightforward: System → Users and Groups → Create a new user, set the identity, home directory, shell, password policy, and groups, then click Create. For an ordinary interactive SSH user, create the home directory, use an installed shell such as /bin/bash, and choose only the groups the person needs. For key-based access, configure SSH Server → User SSH Key Setup, ensure the client retains the private key, and confirm the SSH daemon permits public-key authentication. If login fails, inspect the shell, home-directory ownership, authentication policy, and SSH group restrictions before recreating the account.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
