Lock & Unlock Multiple Users in Linux

Managing multiple user accounts on Linux can get messy - especially when you need to lock or unlock many at once. Thankfully, with a few simple shell scripts, you can automate this entire process!

Let’s break it down step by step

Understanding the Basics ​

What Is the passwd Command?​

The passwd command is one of the most essential tools for Linux admins. It updates user authentication tokens stored in the /etc/shadow file using Linux-PAM and Libuser API. It’s mainly used for managing user passwords, including locking or unlocking them.

What Is the usermod Command?​

The usermod command lets administrators modify user account settings, such as adding users to specific groups or updating account details.

While both commands can handle one user at a time, you can write small shell scripts to automate them for multiple users simultaneously.

---

Preparing the User List ​

Create a text file named user-lists.txt that contains all the usernames you want to lock or unlock - one per line:

$ cat user-lists.txt
u1
u2
u3
u4
u5

---

Lock Multiple Users in Linux​

Here’s a simple shell script to lock multiple accounts:

# user-lock.sh
#!/bin/bash
for user in `cat user-lists.txt`
do
  passwd -l $user
done

Make it executable:

chmod +x user-lock.sh

Then run it:

sh user-lock.sh

Output Example:

Locking password for user u1. 
passwd: Success 
Locking password for user u2. 
passwd: Success 
...

---

Check Locked User Status ​

Want to confirm if users are locked? Use this script:

# user-lock-status.sh
#!/bin/bash
for user in `cat user-lists.txt`
do
  passwd -S $user
done

Make it executable:

chmod +x user-lock-status.sh

Run it:

sh user-lock-status.sh

If you see LK next to the username, it means the account is locked

u1 LK 2025-10-20 0 99999 7 -1 (Password locked.)

---

Unlock Multiple Users in Linux ​

To unlock all users again, use this script:

# user-unlock.sh
#!/bin/bash
for user in `cat user-lists.txt`
do
  passwd -u $user
done

Make it executable:

chmod +x user-unlock.sh

Run it:

sh user-unlock.sh

Output Example:

Unlocking password for user u1. 
passwd: Success 
...

Now check again using the status script - if you see PS, it means the account is unlocked

u1 PS 2025-10-20 0 99999 7 -1 (Password set, SHA512 crypt.)

---

Conclusion​

With just a few shell scripts, you can efficiently lock, unlock, and verify multiple Linux accounts without manually handling each one.

Pro Tip: Keep your scripts secure and executable only by authorized admins.

Got any questions or suggestions? Drop a comment below - let's geek out together!