I forgot my password

[cipriantudoran]

What are you trying to do?

I seem to have forgotten my password. Is there a way to reset it inside the database? I do have database access. Thank you!

What's happening instead?

I get invalid credentials...

Your setup

Truenas App:
App Version:
v3.3.3
Version:
v1.0.18

Anything else that might help?

No response

Before submitting

• I've searched existing discussions and I can't find anything that looks like my problem
• I've reviewed this report and have completed it as fully as I can

[MLuc24]

Yes, and it is straightforward because the hash is a plain bcrypt one. Passwords live in the users table in a password_hash column, and the encoder is a stock Spring Security new BCryptPasswordEncoder(), so any standard bcrypt string will verify against it.

On TrueNAS the easiest way to produce one without installing anything is to borrow a container that already has htpasswd, then write the result into the row:

docker run --rm httpd:alpine htpasswd -bnBC 10 "" 'your-new-password' | tr -d ':\n'

UPDATE users SET password_hash = '$2y$10$...', is_default_password = 1 WHERE username = 'your-username';

Keep the hash in single quotes — bcrypt strings contain $, and an unquoted one will get partly eaten by the shell before it ever reaches the database. Setting is_default_password is optional; the login response carries that flag, so leaving it at 1 means the UI will prompt you to choose a proper password once you are back in, and you can set it from the app instead of by hand.

If it still comes back as invalid credentials after that, check provisioning_method on the same row before digging further — an OIDC-provisioned account is not authenticated against the local hash at all, so updating it would have no effect either way.

Disclosure per the project's AI policy: written with Claude's help. I checked the table name, the column names and the encoder against the current source on develop rather than working from memory, but I have not run the UPDATE against a Grimmory database myself, so take a snapshot of the app's dataset first.