vncpasswd
TLDR
Set VNC password for current user
SYNOPSIS
vncpasswd [options] [passwd-file]
DESCRIPTION
vncpasswd creates or changes VNC password files used by VNC servers for authentication. When run without arguments, it prompts for a password and stores it in ~/.vnc/passwd.
Passwords must be at least 6 characters. Only the first 8 characters are significant due to the DES-based encoding used. The stored password is obfuscated but not securely encrypted.
The filter mode (-f) reads plain-text passwords from stdin and outputs encrypted versions to stdout, useful for scripted password file creation. Up to two passwords can be provided: full-control and view-only.
PARAMETERS
-f
Filter mode: read plain text from stdin, write encrypted to stdout.-viewonly
Set view-only password (no input allowed).-t
Write to stdout for testing.
SECURITY
Password files are set to owner read/write only (600). The obfuscation is weak; anyone with file access can recover the password. Network authentication uses challenge-response, protecting against network sniffing.
CAVEATS
Only first 8 characters matter. Password obfuscation is not secure encryption. File permissions are critical for security. Different VNC implementations may have slightly different vncpasswd tools.
HISTORY
vncpasswd originated with the original AT&T VNC (Virtual Network Computing) implementation. Various VNC implementations (TightVNC, TigerVNC, RealVNC) include their own versions with minor variations but compatible password file formats.


