Prompts for a password and prints a PBKDF2 hash you can paste into /etc/grub.d/00_header to protect GRUB menu editing. PBKDF2 is a deliberately slow key-derivation algorithm that makes the stored hash resistant to brute force. Regenerate the menu with update-grub afterwards and test the lockout on reboot.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.