The enable password is a Cisco IOS global-configuration command that protects access to privileged EXEC mode, where users can view status and change device configuration. section 5.4 section 5.4.1
Key behavior:
- Configure it from global configuration mode with enable password password. section 5.4.1
- Users enter it after issuing enable from user EXEC mode; passwords are case-sensitive and hidden while typed. section 5.4.1
- By default, running-config stores the exact password in cleartext, exposing it to anyone who can view the configuration. section 5.4.1
- service password-encryption changes the stored form to weak type 7 ciphertext, but enable secret is preferred on modern devices. section 5.4.1 section 5.5
R1(config)# enable password ccna #1 R1(config)# exit #2 R1# disable #3 R1> enable #4 Password: #5 R1# #1 Configures an enable password #2 Returns to privileged EXEC mode #3 Returns to user EXEC mode #4 Returns to privileged EXEC mode #5 The password is hidden as you type it.
Follow the complete CLI sequence from configuring the password through leaving and re-entering privileged EXEC mode. section 5.4.1
