Free tools Windows power users keep installed
One-click scans. No signup required.
Webmin creates an SSH-capable account from System → Users and Groups. Enter a login name, create the home directory, choose an installed interactive shell such as /bin/bash, assign only the required groups, set the password or key policy, and click Create. The account can then use SSH only if the SSH daemon also permits that user, shell, group and authentication method.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What Webmin creates—and what actually permits SSH access
Webmin’s Users and Groups module creates a Unix account. That account has a login name, password settings, home directory, login shell, primary group and optional secondary groups. SSH does not bypass those Unix settings: it asks the operating system to authenticate the account and start the configured shell, while the SSH server applies its own access rules.
As an Amazon Associate I earn from qualifying purchases.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Webmin’s Users and Groups documentation says: “Once the Create button has been clicked, the new user will be able to login via SSH, telnet and whatever other services you have set up.” That statement assumes the relevant services are configured to accept the account. A valid Webmin account can still be refused by an SSH policy, a group restriction, an invalid shell or a broken home directory.
- Interactive account: use an installed shell such as
/bin/bashwhen the person needs a normal text-mode SSH session. - Non-interactive account: use a shell such as
/bin/falseonly when shell login must be blocked. The program exits immediately, so an interactive SSH session cannot start. - Authentication: set a password when password authentication is allowed, or arrange public-key authentication with Webmin’s SSH settings.
- Authorization: primary and secondary groups, plus SSH daemon rules, determine which files, services and login paths are available.
Check these prerequisites before creating the account
- Sign in to Webmin with an account that is allowed to manage Unix users.
- Confirm that the Users and Groups module is available under System.
- Decide whether the account needs an interactive shell or must be restricted to non-interactive use.
- Identify the primary group and any secondary groups required for the person’s work. Avoid adding broad, unrelated groups.
- Decide whether the account should receive the standard skeleton files, commonly copied from
/etc/skel. - Know whether your SSH server allows password authentication, public-key authentication, or both.
- If this is delegated administration, establish the permitted UID range, shells, groups and home-directory boundary before granting access to the module.
Do not change a User ID simply to make the form look complete. Webmin normally assigns it automatically. Use a specific UID only when you have a documented requirement, such as matching an existing file-ownership scheme.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Step-by-step: create the Unix user in Webmin
1. Open Users and Groups
- Sign in to Webmin.
- Open System → Users and Groups.
- Click Create a new user.
This module is the place to define the Unix identity that SSH will later authenticate. Creating a Webmin administrator or a record in an unrelated Webmin module does not automatically create a Unix login.
2. Enter the identity fields
Enter the desired Login name and the person’s Real name. Keep the login name consistent with your organization’s naming policy and avoid changing it after files, scheduled jobs or key files have been associated with the account.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Leave User ID unchanged unless a specific, documented UID is required. Automatic assignment reduces the risk of colliding with an existing account. A UID is the numeric identity used for file ownership, so selecting an arbitrary value can create confusing ownership problems later.
3. Create the home directory and its initial files
Set Home directory to Webmin’s Automatic option when it is available. Alternatively, enter an explicit path such as /home/example. Enable Create home directory?; without a home directory, the account may authenticate but lack the expected working location and startup files.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Enable Copy files to home directory? when the user should receive the server’s standard skeleton configuration. On many systems those files come from /etc/skel. Skeleton files can provide a normal shell environment, but they may also include defaults your organization does not want on service accounts, so select this option deliberately.
4. Select the login shell
The Shell field controls the program launched for a text-mode login such as SSH. Choose an installed interactive shell, commonly /bin/bash, for a normal administrator, developer or operator account.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteChoosing /bin/false intentionally prevents an interactive shell: the program exits immediately. This is appropriate only when the account must not obtain a shell. If you select a path that is not installed or is not listed as an approved shell by the operating system, SSH authentication can fail even when the password or key is correct.
| Account purpose | Shell choice | Result |
|---|---|---|
| Normal interactive SSH user | Installed shell such as /bin/bash |
Starts a text-mode session when SSH policy permits it |
| Account that must not receive a shell | /bin/false |
Program exits immediately; interactive shell login is blocked |
| Unapproved or missing shell path | Any unavailable executable | May authenticate unsuccessfully or fail when SSH tries to start it |
5. Configure the password and expiry fields
Set a password if password authentication is permitted by the SSH daemon and the account is intended to use it. If the account will use keys only, follow your organization’s policy for the password field rather than assuming a password is harmless.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Webmin also exposes maximum, warning and inactive-day settings. Use them when the account must expire or become disabled on a schedule. For example, a temporary administrator can have a defined lifetime instead of relying on someone to remember a manual removal date. Record the intended policy so another administrator can distinguish an intentional expiry from an accidental lockout.
6. Assign primary and secondary groups
Select a Primary group, then add only the necessary Secondary groups. Unix group membership controls access to shared files and other resources. A narrowly scoped group set makes permissions easier to audit and reduces the impact of a compromised account.
Do not add a user to a privileged group merely because an application happens to need one directory. Prefer the least powerful existing group that grants the required access, and review inherited access before the first login.
7. Decide whether to create matching accounts in other modules
If the server’s configured integrations require a corresponding identity, enable Create user in other modules?. Webmin documents examples such as Samba and MySQL integrations. Use this option only when those modules are actually configured and the matching account is needed; otherwise, creating extra identities can make later access reviews harder.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
8. Create the account
Review the login name, home path, shell, password or expiry policy and group assignments. Click Create. At this point Webmin creates the Unix account and applies the selected settings. SSH access still depends on the SSH server’s authentication and authorization rules, so continue with the verification steps below.
Set up SSH keys for a new Webmin user
For key-based authentication, open Webmin’s SSH Server module and choose User SSH Key Setup. Enable Setup SSH key for new Unix users. Webmin can generate a key arrangement and copy the generated public key to the account’s authorized_keys file.
- Open Servers → SSH Server (the exact top-level placement can vary with Webmin’s module layout).
- Choose User SSH Key Setup.
- Enable Setup SSH key for new Unix users.
- Choose whether to use the account password as the key passphrase, according to your security policy.
- Create the Unix user in System → Users and Groups.
- Ensure the corresponding private key is stored on the client that will connect.
Two conditions are easy to overlook. The client must possess the matching private key, and the SSH daemon must permit public-key authentication. Webmin’s key setup cannot make a server accept keys if the daemon’s policy disables that method. Protect the private key as a credential; copying only the public key to authorized_keys is not enough to authenticate.
Verify the account before handing over access
Confirm the Unix identity
Return to System → Users and Groups and inspect the newly created record. Confirm the login name, home directory, shell, primary group and secondary groups. Check that the home directory exists and is owned correctly by the new user. An incorrect owner can prevent startup files, key files or application data from being read as expected.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Test the intended authentication method
Use the same method the user will use in practice: password authentication if a password was configured, or the corresponding private key for public-key authentication. A successful authentication should place an interactive account in its configured shell. A non-interactive account using /bin/false should not provide a shell; that behavior is intentional, not evidence that the account was created incorrectly.
Check the SSH daemon’s account and group policy
Review the SSH Server module for rules that allow or deny members of specified groups. A user can have a valid password, a valid key and a valid shell yet still be rejected because the account’s group is excluded. The same check matters when a user is moved between groups after creation.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Troubleshoot an SSH login that fails
| Symptom or likely cause | What to inspect in Webmin | Corrective action |
|---|---|---|
| The connection authenticates but no shell appears | Shell field | Replace an intentional non-interactive shell such as /bin/false with an installed interactive shell if the user needs a session. |
| Password or key is rejected | Password settings, key setup and SSH authentication policy | Confirm the credential is valid, the private key matches the public key, and the daemon permits the selected authentication method. |
| Authentication succeeds but the session behaves incorrectly | Home-directory path, existence and ownership; skeleton-file choice | Create the home directory if it was omitted, correct ownership, and check whether standard files should have been copied. |
| A user is refused despite correct credentials | SSH Server group-based allow/deny controls | Inspect whether the user’s primary or secondary group is blocked or whether an allow rule excludes it. |
| The account cannot be created by a delegated administrator | Users and Groups module restrictions | Review allowed groups, allowed shells, UID ranges and home-directory boundaries. |
Start with the shell
The shell is the fastest first check because /bin/false is designed to terminate immediately. If the account is supposed to be interactive, verify that the selected shell is installed and approved by the system. Do not “fix” a deliberately restricted service account by giving it a shell without confirming the account’s purpose.
Then check the home directory
Verify that the configured path exists and belongs to the new user with appropriate permissions. If Create home directory? was left disabled, the account may lack the environment expected by SSH and command-line tools. If skeleton files were required, verify that Copy files to home directory? was enabled during creation.
Separate credentials from authorization
A rejected password or key points to authentication. A user who authenticates but is immediately disconnected, or who is refused only after a group change, points more strongly to shell or authorization policy. Check the SSH daemon’s group controls rather than repeatedly resetting the credential.
Delegate user creation without granting unrestricted control
Webmin allows administrators to restrict the Users and Groups module for non-root staff. Use those controls when another operator should create accounts but must not be able to grant arbitrary privileges.
- Allowed groups: limit assignment to a dedicated non-privileged group or a small approved set.
- Allowed shells: permit only approved shell paths; exclude shells that would undermine the organization’s account policy.
- UID ranges: reserve a safe range so delegated creation cannot collide with system identities.
- Home-directory boundaries: keep new homes below a dedicated base directory instead of allowing arbitrary filesystem paths.
A practical delegated policy is to combine all four controls: a dedicated non-privileged group, approved interactive or restricted shells, a defined UID range and a fixed home-directory base. Review the policy whenever a new service or shared directory is introduced, because group membership determines access to those resources.
Quick Recap
Choosing settings when creating several accounts
| Decision | Choose this when | Trade-off to document |
|---|---|---|
| Interactive shell | The person must run commands in a normal SSH session | More capability than a service-only identity; apply group and SSH restrictions carefully |
| Non-interactive shell | The identity must not receive a shell | Interactive troubleshooting through SSH is unavailable by design |
| Password authentication | The SSH daemon allows passwords and the user needs that method | Password handling and expiry become part of the account’s lifecycle |
| Public-key authentication | The client can protect a private key and the daemon permits keys | Loss of the private key or incorrect key placement prevents login |
| Automatic home path | The host’s normal home-directory convention should apply | Less explicit than documenting a fixed path for a special-purpose account |
| Explicit home path | The account must live under a known directory tree | Webmin must be able to create the path with correct ownership |
| Skeleton files | The user needs the standard shell environment | Defaults from the system skeleton are copied into the new home |
| Additional groups | A specific shared resource requires them | Every added group can widen access to files or services |
| Expiry settings | The account is temporary or must be disabled on a schedule | Unexpected expiry can look like an authentication failure unless recorded |
Operational checklist
- Use System → Users and Groups → Create a new user.
- Keep the automatically assigned User ID unless a documented UID match is required.
- Use Automatic home-directory selection or a deliberate path such as
/home/example. - Enable home-directory creation and copy skeleton files when the account needs a standard environment.
- Choose an installed interactive shell for normal SSH; use
/bin/falseonly to block shell login intentionally. - Set the password and expiry fields to match the permitted authentication and account lifetime.
- Assign one primary group and only the secondary groups required for the work.
- Enable creation in other Webmin modules only when a matching Samba, MySQL or similar account is actually needed.
- For keys, configure SSH Server → User SSH Key Setup, retain the private key on the client and confirm public-key authentication is enabled.
- Before troubleshooting credentials, inspect the shell, home-directory ownership and SSH group allow/deny rules.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
