/etc/passwd and /etc/shadow, and shadow-utils:

Introduction

Introduction

/etc/passwd

Contains user names, full names, home directories and user shells.

Readable by anyone.

Used to contain hashes of passwords, but not anymore because vulnerable to dictionary attacks.

/etc/shadow

Contains user names and hashed passwords.

Only readable by root.