The root user is the superuser account on Unix-like systems, identified by user ID 0. It bypasses normal permission checks. Windows has a similar role in the Administrator account and elevated privileges.
Why it matters
Because root can change or delete anything, mistakes and compromises are severe. Good practice is to work as a normal user and gain extra rights only when needed, using sudo on Linux or User Account Control on Windows. Servers often disable direct root login over SSH.
The principle of least privilege means each program and person gets only the access required.
Example
$ sudo systemctl restart nginx
$ id
uid=1000(dev) gid=1000(dev)
The user stays a normal account and uses sudo for one privileged action.
Common mistakes
- Logging in as root over SSH with a password; use keys and a regular user.
- Running web applications as root, so a flaw gives attackers full control.
- Mixing up the root user with the root directory (/).
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.