OK, now you got me curious because I had been working on an issue in the tracker where a % does bad things too. Per chance, did you have a sequence of numbers or hexidecimal capable character following the & sign?

OK, looks like it may have been the '&' in the password. Resetting to new password worked.

Thanks

Per chance is there a percent sign ('%') in your password? If so, your browser will transcode it into the ASCII equivalent of the following two digits if they match [0-9,a-f,A-F]. ClearOS will NEVER see it in the manner that you entered it in the browser because the browser LIES about this by design. This is confirmed on Safari, Chrome, and Firefox.

For example, if you are using this password for root in Webconfig 'clear%55' then your REAL root password is 'clearU'. You would be able to login at command prompt with 'clearU'.

If your two characters following your percent corresponds to an ascii character which can be depressed on your keyboard, then you can simply type it instead at command prompt. If you can't hit that key, you are out of luck.

ASCII Table

You can change the password in the ClearOS Webconfig interface by clicking the little man icon in the upper right corner.