2. For each entry of the /etc/passwd file, review the field after the user name to determine if a “!” is present. The presence of a “!” indicates that passwords are encrypted and stored in the shadow password file. If encoded passwords are presented instead of the “!” then the Company is not using a shadow password file. Linux requires that the /etc/passwd file is readable by all user accounts on the system. If encoded passwords are present within the /etc/passwd file, there is increased risk that the encoded passwords could be run against a password cracker and be compromised. (User ID used by K.Pornthep, the row was hightlight by green color).