How to fix the macOS High Sierra root security flaw right now

Mac OS High Sierra users are vulnerable to a serious security flaw that grants just about anyone root access to their computers without a password. Anyone can simply login to your computer by simply entering “root” username and a blank password giving anyone complete and total control to your Mac.

This security flaw present in macOS 10.13.1 was discovered  by developer Lemi Orhan Ergan on Twitter. Apple is yet to release a patch for it, but has released a work around on their support page.

Basically you can change the root password or disable the root user all together. Apple advises that you disable the root user since that’s reserved for system administrative tasks.

Enable or disable the root user

1. Choose Apple menu () > System Preferences, then click Users & Groups (or Accounts).
2. Click , then enter an administrator name and password.
3. Click Login Options.
4. Click Join (or Edit).
5. Click Open Directory Utility.
6. Click  in the Directory Utility window, then enter an administrator name and password.
7. From the menu bar in Directory Utility:
   • Choose Edit > Enable Root User, then enter the password that you want to use for the root user.
   • Or choose Edit > Disable Root User.

Change the root password

1. Choose Apple menu () > System Preferences, then click Users & Groups (or Accounts).
2. Click , then enter an administrator name and password.
3. Click Login Options.
4. Click Join (or Edit).
5. Click Open Directory Utility.
6. Click  in the Directory Utility window, then enter an administrator name and password.
7. From the menu bar in Directory Utility, choose Edit > Change Root Password…
8. Enter a root password when prompted.

Image: howtogeek.com

About David Okwii

David Okwii is the Editor-in-Chief of Dignited.com and a seasoned tech enthusiast whose journey began in the early 2000s. He started blogging while at university, diving deep into mobile apps, smartphone reviews, and operating systems—from testing Linux distros to tweaking Windows machines. David also explores Chromebooks, experiments with Raspberry Pi projects, and brings hands-on curiosity to every review. With vast experience in Uganda’s tech ecosystem and deep knowledge of Africa’s startup landscape, he offers informed, grounded perspectives on consumer technology. When he's not writing or tinkering, David enjoys connecting with nature and exploring the outdoors.