Written 28 Aug 2026. This is a how-to, not a product card. Buy links are not tagged yet.

See if the leftover box still has old login accounts

Before you leave a Marketplace box on the house network, look at who else can still log in. You do not need extra login software for this.

A leftover OptiPlex or office mini from Marketplace may still have the previous owner's login. That is a person folder, not a camera problem. Look first. You are not buying user-management software, and you are not deleting folders on day one.

Skip until SSH works

If you cannot log in from the couch, stop. That is SSH from the couch. Change your own leftover-box password first if you have not: change the leftover-box login password. This note assumes you can type commands on the leftover box from the couch, as yourself.

Skip if you just installed a fresh OS

If this weekend you wiped the leftover box and installed Debian or Ubuntu Server, you probably only have your own account. Skip this note. The install path is what OS to put on the leftover box. This look is for a box that already had someone else's Linux on it.

What this is

A login account is a name the leftover box will let in, plus a folder of that person's files. Those folders live under /home. Your name is one of them. Extra names are leftover people. This is not the same look as see who logged into the leftover box recently (history) or see who is on the leftover box right now (this minute).

See your own name first

SSH in from the couch, then ask:

whoami

That prints the account you are using. Do not lock this name later.

See the people folders

Ask what lives under home:

ls /home

You should see your name from whoami. Extra names are leftover accounts. One name is normal on a box you just installed. Two or more names on a Marketplace box is the usual leftover-office story.

Optional longer list, if you want the leftover box to name every person account, not only the folders:

getent passwd | awk -F: '$3 >= 1000 && $1 != "nobody" {print $1}'

nobody is a system name. Ignore it. Stick to names you also saw under /home.

If you see extra names

Do not delete the folders tonight. They may hold files you still want. Lock the leftover login so that name cannot sign in, and leave the folder alone.

See whether that leftover name still has a password. Swap in the extra name you saw:

sudo passwd -S othername

P means it still has a password. L means it is already locked. NP means no password, which is also a problem. Then lock it:

sudo passwd -l othername

Ask passwd -S again. You want L. The folder under /home stays. That is fine. You locked the door. You did not throw out the room.

Do this once per extra name. Never lock the name whoami printed.

Locking the password stops password login for that name. A leftover SSH key can still get in. Optional look, swap in the extra name:

ls /home/othername/.ssh

If you see authorized_keys and you do not want that leftover key, rename it for now. Do not delete the folder:

sudo mv /home/othername/.ssh/authorized_keys /home/othername/.ssh/authorized_keys.bak

Keys you add later for your own laptop are log in with a key, not the password every time.

What next

Your own password stays change the leftover-box login password. Recent logins stay see who logged into the leftover box recently. When password login has been boring, log in with a key, not the password every time. Skip a camera. Skip opening port 22. SSH stays on the house network: keep the leftover box on the house network.

Skip

• Skip this note if you just installed a fresh OS and ls /home only shows you.
• Skip this note if SSH from the couch does not work yet. That is SSH from the couch.
• Skip deleting folders under /home on day one.
• Skip a camera or extra login software for this look.
• Skip opening SSH to the internet.