@rockaddicted I cannot follow the last steps to enforce my own root password as @frankie842 managed to do.
I've even tried changing the recalbox-config.sh file in raspbian to set password lenght '-w8' to a greater length . 12 and 15. Both were ignored and in the recalbox graphical interface it still shows its small 8 character password.