When I'm about to install a program in the terminal it wants the password:
[sudo] password for xxx:
But when I want to type my password it happens nothing. What should I do?
For security reasons there is no feedback of passwords given in the terminal. Read the following discussion on reasoning behind this and why this will not be implemented:
In this discussion, and also given in the answer to a corresponding question at superuser
There is an option to enable password feedback for
sudo and only for
sudo by editing options in the sudoers file.
Warning: The instructions below are for advanced users only. If something goes wrong when editing the sudoers file, and this file is inaccessible or malformed you will have effectively locked out yourself and any other administrator users of performing any administrative tasks in your system. It is not a good idea to do this on a productive system.
To enable password feedback by asterisks
* when running the
sudo command we have to edit the sudoers file with
We then will have to add
pwfeedback to the default options as shown below:
When using the terminal, for security reasons (Like if someone is standing just behind you and has nothing else to do but stare at your screen while you type a password) you will never see your typed password. You are effectively typing it even if you don't see it.
So just type your password and press ENTER
Here I am checking one of my drives. As you can see, it would look like I did not type my password but I indeed have.
Don't worry, it is a common and positive behavior.
Because the output of any software can be logged to a permanent storage (like the hard disk) in a format readable by humans, the Linux libraries used by most terminal softwares (in your case the
login utility with the
PAM system) have a security feature that hides the passwords from the screen: the password is memorized and - if the software is well made - encrypted in memory when you press
RETURN but even while typing the output does not arrive to the standard output.
This both prevents passive screen logging and people near you from catching the password. Have a nice day and remember to type quickly, because anyone can still see your physical keyboard! :-)
Important: when you see a password field, insert the
root password only if the application is trusted; never publish or save your root password, even if the password field seems secure and does not show any letter.