The single quotes in the example are misleading. Users enclose their actual password in quotes, which results in the literal quote characters being included in the generated password. We need to replace 'password' with <YOUR_PASSWORD> to prevent this.

Sir106
2026-08-15 18:24:36 +02:00
parent 11811ed013
commit 8967c0b7e3
+3 -3
@@ -56,11 +56,11 @@ You can also use the `argon2` command available on most Linux distros.
```bash ```bash
# Using the Bitwarden defaults # Using the Bitwarden defaults
echo -n 'MySecretPassword' | argon2 "$(openssl rand -base64 32)" -e -id -k 65540 -t 3 -p 4 echo -n <YOUR_PASSWORD> | argon2 "$(openssl rand -base64 32)" -e -id -k 65540 -t 3 -p 4
# Output: $argon2id$v=19$m=65540,t=3,p=4$bXBGMENBZUVzT3VUSFErTzQzK25Jck1BN2Z0amFuWjdSdVlIQVZqYzAzYz0$T9m73OdD2mz9+aJKLuOAdbvoARdaKxtOZ+jZcSL9/N0 # Output: $argon2id$v=19$m=65540,t=3,p=4$bXBGMENBZUVzT3VUSFErTzQzK25Jck1BN2Z0amFuWjdSdVlIQVZqYzAzYz0$T9m73OdD2mz9+aJKLuOAdbvoARdaKxtOZ+jZcSL9/N0
# Using the OWASP minimum recommended settings # Using the OWASP minimum recommended settings
echo -n 'MySecretPassword' | argon2 "$(openssl rand -base64 32)" -e -id -k 19456 -t 2 -p 1 echo -n <YOUR_PASSWORD> | argon2 "$(openssl rand -base64 32)" -e -id -k 19456 -t 2 -p 1
# Output: $argon2id$v=19$m=19456,t=2,p=1$cXpKdUxHSWhlaUs1QVVsSStkbTRPQVFPSmdpamFCMHdvYjVkWTVKaDdpYz0$E1UgBKjUCD2Roy0jdHAJvXihugpG+N9WcAaR8P6Qn/8 # Output: $argon2id$v=19$m=19456,t=2,p=1$cXpKdUxHSWhlaUs1QVVsSStkbTRPQVFPSmdpamFCMHdvYjVkWTVKaDdpYz0$E1UgBKjUCD2Roy0jdHAJvXihugpG+N9WcAaR8P6Qn/8
``` ```
@@ -72,7 +72,7 @@ If you have configured your Vaultwarden via the `/admin` page, you should paste
<img width="831" height="63" alt="image" src="https://github.com/user-attachments/assets/52bf60df-1880-41b2-aab7-eac9982f7505" /> <img width="831" height="63" alt="image" src="https://github.com/user-attachments/assets/52bf60df-1880-41b2-aab7-eac9982f7505" />
After you set the PHC string, you can login by using the password you have used to generate the PHC string, e.g. `MySecretPassword` in the example above to login. After you set the PHC string, you can login by using the password you have used to generate the PHC string, e.g. <YOUR_PASSWORD> in the example above to login.
> [!NOTE] > [!NOTE]
If you can enter the whole `$argon2id$…` PHC string as an admin password you are probably using an outdated version of Vaultwarden that does not support argon2id yet. Make sure you are using at least the [latest version](https://github.com/dani-garcia/vaultwarden/releases/latest). If you can enter the whole `$argon2id$…` PHC string as an admin password you are probably using an outdated version of Vaultwarden that does not support argon2id yet. Make sure you are using at least the [latest version](https://github.com/dani-garcia/vaultwarden/releases/latest).