diff --git a/exec/passwd.lua b/exec/passwd.lua
new file mode 100644
index 0000000..d32ce21
--- /dev/null
+++ b/exec/passwd.lua
@@ -0,0 +1,4 @@
+local tA = {...}
+local s=os.gensalt(16)
+io.write("New password for "..tA[1]..": ")
+os.setuser(tA[1],sha.sha256(io.read("*")..s),s)
diff --git a/exec/su.lua b/exec/su.lua
new file mode 100644
index 0000000..2e9822f
--- /dev/null
+++ b/exec/su.lua
@@ -0,0 +1,5 @@
+local tA = {...}
+local s=os.gensalt(16)
+io.write("Password for "..tA[1]..": ")
+local res = os.su(tA[1],io.read("*"))
+if not res then print("Failed.") end