-x  Appears only for backwards compatibility.

-principal <user name>
    Names the Authentication Database entry for which to change the password. If this argument is
    omitted, the database entry with the same name as the issuer's local identity (UNIX UID) is changed.

-password <user's password>
    Specifies the current password. Omit this argument to have the command interpreter prompt for the
    password, which does not echo visibly:

       Old password: current_password

-newpassword <user's new password>
    Specifies the new password, which the kpasswd command interpreter converts into an encryption key
    (string of octal numbers) before sending it to the Authentication Server for storage in the user's
    Authentication Database entry.

    Omit this argument to have the command interpreter prompt for the password, which does not echo
    visibly:

       New password (RETURN to abort): <new_password>
       Retype new password: <new_password>

-cell <cell name>
    Specifies the cell in which to change the password, by directing the command to that cell's
    Authentication Servers. The issuer can abbreviate the cell name to the shortest form that
    distinguishes it from the other cells listed in the local /etc/openafs/CellServDB file.

    By default, the command is executed in the local cell, as defined

       First, by the value of the environment variable AFSCELL.

       Second, in the /etc/openafs/ThisCell file on the client machine on which the command is issued.

-servers <explicit list of servers>
    Establishes a connection with the Authentication Server running on each specified machine, rather
    than with all of the database server machines listed for the relevant cell in the local copy of the
    /etc/openafs/CellServDB file. The kpasswd command interpreter then sends the password-changing
    request to one machine chosen at random from the set.

-pipe
    Suppresses all output to the standard output stream or standard error stream. The kpasswd command
    interpreter expects to receive all necessary arguments, each on a separate line, from the standard
    input stream. Do not use this argument, which is provided for use by application programs rather than
    human users.

-help
    Prints the online help for this command. All other valid options are ignored.