# Clear text password in Elasticsearch, logstash, kibana and Beats

**URL:** <https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487>\
**Category:** Elasticsearch\
**Created:** [January 9, 2019, 9:22am UTC](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487 "2019-01-09T09:22:53Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![DineshTripathi](https://avatars.discourse-cdn.com/v4/letter/d/ce7236/32.png) [@DineshTripathi](https://discuss.elastic.co/u/DineshTripathi)\
**Post date:** [January 9, 2019, 9:22am UTC](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487/1 "2019-01-09T09:22:53Z")

</div>

How we can encrypt the clear text password in different components config files? I see few doc talking about adding those setting in keystore but not very clear. Can someone guide?

---

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [January 11, 2019, 9:20am UTC](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487/2 "2019-01-11T09:20:09Z")

</div>

Hi

See [the Elasticsearch secure settings doc](https://www.elastic.co/guide/en/elasticsearch/reference/current/secure-settings.html) for Elasticsearch, [the Logstash secure settings doc](https://www.elastic.co/guide/en/logstash/current/keystore.html) for logstash and [the Kibana secure settings doc](https://www.elastic.co/guide/en/kibana/current/secure-settings.html) for Kibana as a starting point.

If this is still not clear, it would most probably help if you could add a more specific question about what exactly you are trying to do and what issues you are encountering.

---

<div class="post-metadata">

**Author:** ![DineshTripathi](https://avatars.discourse-cdn.com/v4/letter/d/ce7236/32.png) [@DineshTripathi](https://discuss.elastic.co/u/DineshTripathi)\
**Post date:** [January 11, 2019, 10:03am UTC](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487/3 "2019-01-11T10:03:00Z")

</div>

@ikakavas, basically when we have xpack enabled, communication between different components within elastic stack requires credentials. e.g. communicating from logstash to elasticsearch require elastic credential.  
Now, those credentials in logstash config file will be visible in clear text ( not encrypted). This is not allowed per my org security policy.  
Is there anyway to not show clear text password in config files?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 11, 2019, 10:07am UTC](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487/4 "2019-01-11T10:07:29Z")

</div>

There is as per the links provided 🙂

---

<div class="post-metadata">

**Author:** ![DineshTripathi](https://avatars.discourse-cdn.com/v4/letter/d/ce7236/32.png) [@DineshTripathi](https://discuss.elastic.co/u/DineshTripathi)\
**Post date:** [January 12, 2019, 3:29pm UTC](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487/5 "2019-01-12T15:29:16Z")

</div>

Thanks, This is what i was looking far. Appreciate your help

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 9, 2019, 3:29pm UTC](https://discuss.elastic.co/t/clear-text-password-in-elasticsearch-logstash-kibana-and-beats/163487/6 "2019-02-09T15:29:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.