Why Is It Called 'Root'? — The Origin of the Term

A tree has one root, buried in the ground, invisible but anchoring the entire structure. Branch upward, leaf outward, but everything traces back down to that single origin. Unix took that image and made it the foundation — literally — of its file system and its security model.

The Story

The root directory / is the top of the Unix file system hierarchy. Every file, every directory, every device — they all descend from that forward slash. The term “root” was a natural choice for the designers at Bell Labs in the early 1970s, drawing on the tree data structure metaphor that computer science had already embraced.

But “root” gained a second meaning that changed computing forever. The superuser account — the administrator with unrestricted system access — became known as the “root user” because that account could access every corner of the tree, from root to leaves. Its home directory was placed at /root, a private space for the entity that could go anywhere.

The root user is the system’s ultimate authority. No permission checks, no access denied, no “you can’t do that.” Root can read any file, kill any process, delete any directory, reconfigure any network interface. With great power comes great responsibility — and great danger, which is why Unix systems enforce strict separation between root and ordinary users.

How It Evolved

The tree metaphor runs deep in computing, and “root” sits at the center:

• Root directory (/): The starting point of the file system tree.
• Root user: The superuser with access to every branch.
• Rootkit: A collection of tools that give an attacker root-level access while hiding their presence. The term emerged in the early 1990s, with the SunOS rootkit by Lane Davis and Steven Dake. A rootkit literally “kits” out the root with replacement binaries that lie about what the system is doing.

The relationship between root directory and root user is not accidental. If the file system is a tree, the root user is the one who can climb any branch, pick any leaf, and dig at the soil. A regular user is confined to their own subtree — their home directory and its children.

Unix naming conventions spread the metaphor further:

• Parent directory: The directory one level up the tree.
• Child directory: One level down.
• Leaf: A file with no children (a terminal node).
• Path: The route from root to a specific node.

Did You Know?

The su command stands for “switch user” (or historically “substitute user”), and running su - gives you a root shell. The sudo command lets authorized users run specific commands as root. Most modern Linux distributions disable direct root login via SSH entirely — you must use sudo.

The concept of “root access” has expanded beyond Unix. Android users “root” their phones to gain administrative control. “Jailbreaking” an iPhone is its own term, but the goal is the same: get to the root.

The infamous 2014 “Heartbleed” bug was a vulnerability in OpenSSL that could leak a server’s private memory — including keys that protect root access. It got its name because it “bled” from the “heartbeat” extension, but the real panic was about what an attacker could do with root-level secrets.

FAQ

Related Etymologies