# Elastic xpack security

**URL:** https://discuss.elastic.co/t/elastic-xpack-security/108885
**Category:** Elasticsearch
**Created:** [November 23, 2017, 12:33pm UTC](https://discuss.elastic.co/t/elastic-xpack-security/108885 "2017-11-23T12:33:06Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [November 24, 2017, 12:44pm UTC](https://discuss.elastic.co/t/elastic-xpack-security/108885/2 "2017-11-24T12:44:46Z")

</div>

Hi Raj,

[setup-passwords](https://www.elastic.co/guide/en/elasticsearch/reference/current/setup-passwords.html) uses the [bootstrap password](https://www.elastic.co/guide/en/x-pack/6.0/setting-up-authentication.html#bootstrap-elastic-passwords) in order to set the password for the users. After you set a password for the elastic user, the bootstrap password is no longer active and this is why you get the second error

> ERROR: Failed to verify bootstrap password.

Were you able to login with either `kibana` or `logstash_system` users and their auto-generated passwords ?

Now, if you don't remember the original password for elastic that `setup-passwords` created, or if you in any case need to reset it to something new, you can follow the instructions that @TimV has shared in [this answer](https://discuss.elastic.co/t/i-lost-the-password-that-has-been-changed/91867/2)

---

_[View the full topic](https://discuss.elastic.co/t/elastic-xpack-security/108885)._