I see a new user is made. How to know who created and how (from which program)?

1 Answer 1


When you have created a new user look in /var/log/auth.log; the details are in there. I just created new user jim by running sudo adduser jim, for example, and this is at the end of auth.log (I have removed the date and host name from the start of the log):

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.