The username is the "root" of all problems for Apple's latest operating system.
It turns out you don't need a password to log in to a locked Apple device using MacOS High Sierra -- just the username "root."
By heading to your device's System Preferences, under Users & Groups, you can click on the lock and get hit with a prompt asking for a username and password to change settings. Then, instead of entering a password, you can type in "root" for the username and leave the password field empty.
After clicking unlock several times, it should eventually open up, no passwords necessary. Lemi Orhan Ergin, the founder of Software Craftsmanship Turkey, discovered the security flaw and tweeted it out to Apple Support on Tuesday.
CNET independently confirmed this security flaw exists and reached out to Apple about the issue. The company didn't immediately respond to a request for comment.
The simple exploit means anybody with physical access to your MacOS High Sierra device can log in on your computer, no matter how secure your passwords are.
Amit Serper, a security researcher from Cybereason, demonstrated that the bug works even on the login screen after restarting the computer.
The bug works for every aspect of the OS that would normally require a password, which means someone could also get access to your Keychain, containing all your passwords.
Kurt Opsahl, the general counsel for the Electronic Frontier Foundation, recommended creating a username "root" and setting a password to solve the blatant issue.