How do I edit a role without re-entering its password?

Steps

1. Choose Edit on the profile in the Scan Profiles list, or on a target's Scan profiles card.
2. Open Authentication and change what you need on the role, such as its name, privilege level, login URL or success condition.
3. Skip the Password box. A stored role shows a notice that says to leave fields blank to keep the credentials.
4. Press Save. The saved secret carries over.

Good to know

You never need to retype a secret just to edit around it. The edit page never displays secrets, so the boxes look empty even though a value sits safely behind them.

The API works the same way. The reference says a profile update preserves blank secret fields, and reads of a profile come back with secrets masked.

• Blank box: the saved value stays.
• New value: it replaces the saved one.
• Clear: it removes the stored form credentials on purpose.

Watch out for one trap. Browser autofill can fill a blank password box with an old saved password and overwrite the right one. If scans start failing after an edit, check for that first.

Save often, and check the role card after each edit. A quick look at the badges tells you the privilege and method are still what you meant.

See also why the password field is blank and how to change a stored password.

Related questions

• How do I change a stored password on a role?
• Why is the password field empty when I edit my profile?
• What does "Form credentials stored — leave fields blank to keep it." mean?
• How do I clear stored form credentials from a role?
• How do I edit an existing scan profile?

Full tutorial

How to edit a scan profile

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre