# Does elasticsearch recommend to use any special character in user password for user
**URL:** https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974
**Category:** Logstash
**Created:** [October 22, 2020, 9:26am UTC](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974 "2020-10-22T09:26:39Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@sreerama.naga](https://discuss.elastic.co/u/sreerama.naga)
#### Post date: [October 22, 2020, 9:26am UTC](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974/1 "2020-10-22T09:26:39Z")
Hi,
Here I am trying to get the details, does elasticsearch recommend to use any special character for user password? I tried doing some search in those lines but didn't succeed in getting any proper pages with recommendations for the password.
How ever here in the below page, it doesn't specify anything about chacracters support for password.
> **[Create passwords for built-in users | Elasticsearch Reference \[7.x\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.x/get-started-built-in-users.html)**
Here we also expect the logstash should work seamlessly with the same user password in connecting to elasticsearch.
could you please guide or help me in getting this information with recommendations from elasticsearch.
Thank you in advance!
---
### Author:  [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)
#### Post date: [October 22, 2020, 11:11am UTC](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974/2 "2020-10-22T11:11:07Z")
HI,
I have not found a page where Elastic recommends a password policy. The only requirement I have found so far is [this](https://github.com/elastic/elasticsearch/issues/29913) issue from 2017 which is still correct: I have checked in our 7.9.2 Kibana instance and it requires passwords to be at least 6 characters long.
Personally, I am not a create fan of special characters as they can cause problems depending on the usecase(e.g. the hash sign can mark a comment in linux, ...). Lately, I only use a-zA-Z0-9 and dash and underscore. For complexity, I use passwords between 20 to 40 characters...
Best regards
Wolfram
---
### Author:  [@sreerama.naga](https://discuss.elastic.co/u/sreerama.naga)
#### Post date: [October 23, 2020, 4:22am UTC](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974/3 "2020-10-23T04:22:38Z")
Thank you for your response Wolfram.
Thank you for the [link](https://github.com/elastic/elasticsearch/issues/29913). I see it is more like enforcing rule.
Is it safe to assume the elastic user password can be anything, including any special character and elasticsearch support it without any issue as we didn't see any page which recommends the password policy for elastic user password ?
---
### Author:  [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)
#### Post date: [October 23, 2020, 4:23am UTC](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974/4 "2020-10-23T04:23:59Z")
> [@sreerama.naga](#):
>
> Is it safe to assume the elastic user password can be anything, including any special character and elasticsearch support it without any issue as we didn't see any page which recommends the password policy for elastic user password ?
Yes, I think so. As long as your environment supports the characters Elasticsearch should too.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 20, 2020, 4:24am UTC](https://discuss.elastic.co/t/does-elasticsearch-recommend-to-use-any-special-character-in-user-password-for-user/252974/5 "2020-11-20T04:24:13Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.