Losing or forgetting the VICIdial admin password is a common issue, especially when systems are handed over between teams or managed by multiple administrators. Fortunately, VICIdial stores user credentials in its MySQL database, and an administrator with server access can retrieve or reset the password directly from the database.
This article explains how to retrieve the VICIdial admin user password using MySQL, along with important security notes and best practices.
Prerequisites
Before proceeding, ensure you have:
- SSH access to the VICIdial server
- MySQL root or database administrator credentials
- Permission to access the
asteriskdatabase - Basic knowledge of Linux command line
Important: This method should only be used on systems you own or are authorized to manage.
Step 1: Log in to the VICIdial Server
Connect to your VICIdial server using SSH:
ssh root@your_vicidial_server_ip
Step 2: Log in to MySQL
If your MySQL root user has no password:
mysql -u root
If your MySQL root user has a password (most systems do):
mysql -u root -p
You will be prompted to enter the MySQL root password.
Step 3: Select the VICIdial Database
VICIdial stores all configuration and user data in the asterisk database.
USE asterisk;
Step 4: Retrieve VICIdial User Passwords
Run the following query to list all VICIdial users and their passwords:
SELECT user, pass FROM vicidial_users;
Example Output
+----------+----------+
| user | pass |
+----------+----------+
| admin | 1234 |
| manager | test123 |
| agent001 | agentpw |
+----------+----------+
- The
usercolumn shows the VICIdial username - The
passcolumn shows the password (usually stored in plain text on older versions)
Look for the admin user to retrieve the admin password.
Step 5: Log in to VICIdial Admin Panel
Open your browser and access the VICIdial admin URL:
http://your_server_ip/vicidial/admin.php
Use the retrieved username and password to log in.
Optional: Reset the Admin Password (Recommended)
If you prefer to reset the password instead of using the old one, run:
UPDATE vicidial_users
SET pass='NewStrongPassword123'
WHERE user='admin';
Then exit MySQL:
EXIT;
Use the new password to log in.
Security Considerations (Very Important)
- Older VICIdial versions store passwords in plain text, which is insecure
- Restrict MySQL and SSH access to trusted administrators only
- Change the admin password immediately after recovery
- Avoid using simple passwords like
1234oradmin - Consider limiting database access via firewall rules
Troubleshooting Tips
- Access denied to MySQL
- Verify MySQL root password
- Check
/etc/my.cnfor/etc/mysql/my.cnf
- No admin user found
- Run:
SELECT user FROM vicidial_users;
- Run:
- Login still fails
- Clear browser cache
- Verify correct VICIdial URL
- Check Apache and MySQL services are running
Conclusion
Retrieving a VICIdial admin password directly from the MySQL database is a straightforward process when you have proper server access. However, for security reasons, it is always best to reset the password immediately and follow strong credential management practices.
This method is invaluable for system recovery, audits, and inherited systems where credentials are missing.
