PASSWORD - Password change log

in flag

Is there any way to check all password change logs for one specific user?

I'm using macOS and since its based on Unix, I thought that this could be the place to post this question.

Someone changed my user password and I could get my user back through the appleID and terminal password reset using safe mode.

I want to prove that someone changed my password, while the mac was unlocked.

I tried to use the command dscl . read /Users/<username> accountPolicyData, but with it could only find the last time it was updated - which coincides with my resetpassword command execution through the terminal.

I want to check if there is any place where I can see all password changes for a user

Could someone help me?

cn flag
The more specific or the generic are probably better platforms for your question

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.