So some time ago I set up a BIOS “User” password and and “Admin” password on a laptop.

For those who doesn’t know. A BIOS “User” password is prompted every time you boot a computer using that motherboard, and the “Admin” password is prompted when you attempt to enter the BIOS settings

If you have both set up, either password is accepted on boot, but only the “Admin” password is accepted for getting into the BIOS Settings.

I’ve just had both of these set up because I’m weird and paranoid (before you say “encryption”, yes the disk is also encrypted), and I got into a habit of just using the Admin password for boot.

But now I think its unnecessary and annoying now and doesn’t seem to do much since the disk is also encrypted, so I tried to remove the “User” password in the BIOS settings, but I forgot the User password. Inputing the Admin password is rejected as “incorrect password”, but its accepted when you try to change to Admin password. Wtf lol. The Laptops I had before this one, allows the Admin to reset the User Password, wtf is this new change? Admin cannot reset User Password? Make zero sense lol. So I guess I’m just stuck with this unchangeable setting? Triggers my OCD so much that there’s a setting now I can’t toggle on/off.

I mean it’s still perfectly usable as long as I keep the Admin password enabled and not mess with that, so this is the definition of mildly infuriating, just very samll annoyance I’m stuck with.

It’s an Asus Zenbook btw if you’re wondering.

  • Nate@programming.dev
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    7 hours ago

    There’s this, looks kinda fishy but it only asks for a date from the bios and spits out a code without asking for payment, couldn’t hurt to try

    Edit: found the source for it if you want to roll your own

  • altphoto@lemmy.today
    link
    fedilink
    English
    arrow-up
    6
    ·
    9 hours ago

    Oh Asus! You fucked up! For this, I’m out. Never again.

    Like other things in life, there’s now nothing Asus can do or say that will convince me to ever buy one ever again.

    Remember ATI video cards? Yup, never again. There’s no more ATI. It was nice while it lasts.

    • untorquer@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      5 hours ago

      ATI was bought by AMD in 2006 and the brand name phased out by 2010. So there’s still ATI cards, there just AMD instead.

    • cantthinkofausername@sh.itjust.worksOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      7 hours ago

      Um… I mean I’m not sure if the takeaway from this thread is “Asus Bad”, but its more like “Who the fuck designed this shit” shitty design BS.

      I mean, I still have a usable laptop, just have an annoying setting I can’t seem to ever turn off from the rest of this laptop’s lifespan.

  • NeatNit@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    14
    ·
    20 hours ago

    It’s an Asus Zenbook btw if you’re wondering.

    Of fucking course it’s an asus. There’s your problem right there. They don’t know what the hell they’re doing, and no one should ever buy anything this company makes.

    Source: I have also been burned by them, and only afterwards did I hear a lot of other people’s horror stories. It’s a shit company.

    • irelephant [he/him]@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      30 minutes ago

      I had one die on me out of nowhere, the fans would start spinning, but nothing else would happen.
      I googled it and the top solution is to put it away for a few years and forget about it, then, it miraculously starts working again.
      Hasn’t worked for me so far.

      • NeatNit@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        1
        ·
        34 minutes ago

        You know, that’s a great question that I don’t have a good answer to. I don’t have enough experience with laptops so take this with a bucketful of salt, but I think:

        Framework looks amazing, but perhaps a bit niche: https://frame.work/ (next time I’m in the market for a laptop, I think this is what I’ll get)

        MSI is alright I think? So is Dell, maybe?

        In my head HP has an absolutely dreadful reputation, but that’s just because of printers. A friend of mine is pleased with her HP laptop.

        Lenovo, I’m not sure. They’ve had an inexcusable security blunder in the past which made me write them off ( https://www.youtube.com/watch?v=-enHfpHMBo4 ) but maybe they’ve turned things around, I really don’t know.

        The laptop market is in a really poor state, other than macbooks (which aren’t really relevant for this discussion for obvious reasons) it’s a race to the bottom and everyone’s making compromises that I really don’t want to see.

    • Nate@programming.dev
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      7 hours ago

      Their tag line is “in search of incredible” for a reason, they sure as fuck haven’t found it!

    • kalpol@lemmy.ca
      link
      fedilink
      English
      arrow-up
      4
      ·
      9 hours ago

      Is this new? I have some 10 year old ish Asus motherboards that have been really solid

  • sad_detective_man@leminal.space
    link
    fedilink
    English
    arrow-up
    19
    ·
    1 day ago

    sorry for taking a tangent and let me preface by saying I’m not criticizing your setup or desire for security at all. it’s obviously adding a particular kind of physical roadblock to what stealing your stuff would require.

    but I discovered that BIOS setting at a young age and have had this burning question about what exactly does it protect? it does prevent booting but in a situation where somebody has access to your computer that only really stops them from using your motherboard right? is OP’s usecase the actual intention, where somebody would be required to physically steal at least part of the computer in order to access it?

    • Baleine@jlai.lu
      link
      fedilink
      English
      arrow-up
      17
      ·
      1 day ago

      On school computers it blocked us from just booting a live usb and accessing the whole disk

    • IsThisAnAI@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      1 day ago

      Motherboard has a key on it that is used to generate a key pair with your disk when encrypted. So you can’t just snag the drive and pop it in another computer.

      Note; I have simplified the technical details above for simplicity, on a technical level you’d want to read up for a technically corrected explanation.

      • sad_detective_man@leminal.space
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 day ago

        ohhhhhh. I had no idea it did that. no, thank you for simplifying it. I’m only self-taught so I barely have a hobbyist’s understanding of computers.

        • naticus@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          ·
          17 hours ago

          Don’t discount your own knowledge just because you’re self taught. I’ve been in IT for 26 years now and help in managing over 100k user accounts and hundreds of servers, and while I’ve had some formal training, >90% of what I use daily is self taught. It’s a desire for knowledge that matters, not how that knowledge is derived.

          • sad_detective_man@leminal.space
            link
            fedilink
            English
            arrow-up
            1
            ·
            5 hours ago

            wow, that’s reassuring. people in my life are telling me I should have pursued a career in IT support, repair, or admin because I built a couple computers and tinker with software. are there actually places in that market for people without formal training like in that ancient greentext about the rookie IT guy?

  • bamboo@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    26
    ·
    edit-2
    1 day ago

    Are CMOS batteries still a thing? Removing that and the laptop battery should wipe the BIOS to the default settings. Actually before that, can you reset the BIOS settings with the admin password, and will that wipe the user password settings?

    • fuckwit_mcbumcrumble@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      26
      arrow-down
      1
      ·
      1 day ago

      That hasn’t worked on any (good) machine for the last 20 years. Especially now in the EFI age any important settings like that are stored in nvram.

      • bamboo@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 day ago

        Maybe you can check the manual if the laptop has a CMOS battery. If it does, you’ll have to take apart the laptop to remove the battery for a few minutes, which will reset all the settings.

        • cantthinkofausername@sh.itjust.worksOP
          link
          fedilink
          English
          arrow-up
          6
          ·
          1 day ago

          I searched the entire PDF for “CMOS” and cant find anything. I read a few reddit threads saying modern laptops don’t store CMOS settings in volitile memory anymore, so its harder to bypass.

          • AlphaOmega@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            11 hours ago

            Motherboards used to have a jumper pin to erase bios passwords and reset bios to default. Doubtful that a modern laptop has these, but worth a look.

  • Pika@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    7
    ·
    1 day ago

    is it not possible to delete/turn off the user/boot password requirement all together and then save and reboot then try setting it again? I’ve never seen a mb that cared about user password entry, admin gave bios access and from there any setting was able

    • cantthinkofausername@sh.itjust.worksOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      7 hours ago

      I deleted the Admin password, I see the User password still says “Installed”, yea it seems like if I reboot, I’ll get locked out, because I wouldn’t have an Admin pin to override the Boot Password screen. So yea… nope, not testing it, I quicklt re-added the Admin password back in and now have that Admin password saved in my password manager just in case I forget this one too.

  • tal@lemmy.today
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 day ago

    If it honestly doesn’t permit the User password to be reset, is there a “factory reset the whole BIOS” option?

    • cantthinkofausername@sh.itjust.worksOP
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      Couldn’t find such option. I find a “load default settings” thing, but the passwords are unaffected by that. I tried updating the BIOS but the passwords are still intact.

      I wonder if there’s a tool that can reset the BIOS from the OS.

      • partial_accumen@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        2
        ·
        1 day ago

        Have you tried doing a full BIOS update? As in, download from the manufacturer. I wonder if that would overwrite the passwords.

        • cantthinkofausername@sh.itjust.worksOP
          link
          fedilink
          English
          arrow-up
          5
          ·
          1 day ago

          I downloaded the BIOS on a USB drive, I went into the BIOS menu and updated it. The version number is now different, but the passwords remain. 🤷‍♂️

    • lurch (he/him)@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 day ago

      If it’s an EEPROM it can also be reset electronically by accessing the pins soldered onto the bord, but I don’t know any details about that.

  • floo@retrolemmy.com
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    10
    ·
    edit-2
    1 day ago

    Did you try typing in the user password instead of the admin password when it asks for a password?

    It probably wants you to authenticate as that user in order to delete the password requirement for it. The admin account probably doesn’t let you alter any of the settings for a different user. User space management with bios is often limited.

    • cantthinkofausername@sh.itjust.worksOP
      link
      fedilink
      English
      arrow-up
      11
      ·
      1 day ago

      Again, the problem is, I forgot the User password. I didn’t try too hard commiting that to memory because I just assumed (like with previous laptops) that I can reset it if I forget.

      I can get to the BIOS Menu but it has 3 lines, one asks for “Current Password” and then the other two is “new password” and “confirm new password”. It doesn’t recognize the admin password as a valid password, but it does recognize it if I try to change the admin passwors instead. I tried removing the Admin password, and did it, but the User password is still in place, so I just quickly re-added the admin password back in so I don’t lock myself out when I reboot.

      Not sure if this is a “modern laptop” thing, or if its only Asus that does that. I had HP and Dell before, and they just let you reset the user password with he admin one.

      • floo@retrolemmy.com
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        13
        ·
        edit-2
        1 day ago

        I’m very sorry, I missed the part when you said you didn’t know the user password. My bad!

        It sounds like the way that the user space is managed in your bios won’t permit any other alternatives other than the possibility of deleting the user account using the administrator account? Is that possible?

        You’re not gonna be able to reset that password unless you know it. That’s kind of the point of the password. Unfortunately, it seems that your bios does not allow for you to change the user password without knowing the old one, but it may let you delete the account altogether and re-create it with a new password. That however, may cause a bunch of other problems that I can’t really predict without knowing a lot more information.

        Don’t try doing this until we talked about this a bit more.