# Does anyone know if Filebeat keystore is as secure as the Linux Shadow file?
**URL:** https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611
**Category:** Beats
**Tags:** filebeat
**Created:** [May 5, 2023, 4:44am UTC](https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611 "2023-05-05T04:44:10Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@danielc](https://discuss.elastic.co/u/danielc)
#### Post date: [May 5, 2023, 4:44am UTC](https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611/1 "2023-05-05T04:44:10Z")
Does anyone know if Filebeat keystore is reversible? is it as secure as the Linux Shadow file?
---
### Author:  [@Alexis\_Roberson](https://discuss.elastic.co/u/Alexis_Roberson)
#### Post date: [May 5, 2023, 4:01pm UTC](https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611/2 "2023-05-05T16:01:05Z")
So I'll answer your first question by saying yes, filebeat keystore is just as secure as linux shadow file. As you know, passwords in the shadow file are encrypted and stored and access is limited to root user. In Filebeat Keystore, secure information is defined into an obfuscated or obscure data store and accessed through commands using the Keys' name. Even if someone accesses the data store, they wouldn't be able to decipher the intended meaning of the file because of the intentional distortion.
Both Linux Shadow file and Filebeat Keystore follow the same idea of storing sensitive data into files that cannot be easily understood by someone without access. Whether filebeat keystore is reversible or not, i'm not sure. I know with the shadow file, the data can be unencrypted but with Filebeat Keystore, the user only interfaces with it via Keystore commands.
Hope this helps
---
### Author:  [@danielc](https://discuss.elastic.co/u/danielc)
#### Post date: [May 5, 2023, 8:19pm UTC](https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611/3 "2023-05-05T20:19:53Z")
Thanks! I hope that your answer will be added into Filebeat's documentation.
---
### Author:  [@Alexis\_Roberson](https://discuss.elastic.co/u/Alexis_Roberson)
#### Post date: [May 9, 2023, 2:44pm UTC](https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611/4 "2023-05-09T14:44:10Z")
Hi @danielc,
I need to update my response. I said Filebeat keystore is as secure as the linux shadow file and that's not true.
1. the shadow file is hashed (so it's one way). the keystore needs to get back the original value so is encrypted (you get back the original value)
2. With Filebeat keystore, we always say obfuscate and not encrypt, because we use a blank password (and I think this is still the case looking at [Keystore: Allow user to set their own password on the keystore · Issue #5737 · elastic/beats · GitHub](https://github.com/elastic/beats/issues/5737))
So these are essentially two very different methods and to say filebeat keystore is just as secure as linux shadow file would be too much of a blanket statement.
Sorry for the confusion.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 6, 2023, 4:45pm UTC](https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611/5 "2023-06-06T16:45:04Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.