/etc/shadow is a protected Linux file that stores password hashes and account metadata such as aging and expiration fields. It is readable only by root or tightly controlled privileged processes, which helps keep sensitive credential data out of reach of ordinary users and applications.
In cyber security, /etc/shadow matters because disclosure of the file does not reveal plaintext passwords, but it can still enable offline password cracking. Attackers who gain local privilege, abuse a kernel bug, or steal a backup may try to copy the file and brute-force weak hashes later. Defenders protect it by limiting access, using strong hashing algorithms, monitoring for unauthorized reads, and patching kernel or privilege-escalation flaws that could expose its contents.