# Filebeat keystore using empty password

**URL:** <https://discuss.elastic.co/t/filebeat-keystore-using-empty-password/236336>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [June 9, 2020, 12:55pm UTC](https://discuss.elastic.co/t/filebeat-keystore-using-empty-password/236336 "2020-06-09T12:55:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![yuqingz](https://avatars.discourse-cdn.com/v4/letter/y/f04885/32.png) [@yuqingz](https://discuss.elastic.co/u/yuqingz)\
**Post date:** [June 9, 2020, 12:55pm UTC](https://discuss.elastic.co/t/filebeat-keystore-using-empty-password/236336/1 "2020-06-09T12:55:47Z")

</div>

HI all:

Based on the source code of filebeat, an empty string is used as the password to generate keysotres(see [https://github.com/elastic/beats/blob/c825c727948c1f87eb36e5d4bd982de06c42cfbf/libbeat/keystore/file\_keystore.go#L99](https://github.com/elastic/beats/blob/c825c727948c1f87eb36e5d4bd982de06c42cfbf/libbeat/keystore/file_keystore.go#L99)). So with the content of filebeat.keystore file, we can easily crash the secrets(filebeat ships with many tests which makes it even more conveniently).

Does filebeat has the plan of using users own passwords? Or is there any more secure way to store secrets in filebeat?

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [June 10, 2020, 8:38am UTC](https://discuss.elastic.co/t/filebeat-keystore-using-empty-password/236336/2 "2020-06-10T08:38:20Z")

</div>

Hi @yuqingz!

There is an open issue for this: [https://github.com/elastic/beats/issues/5737](https://github.com/elastic/beats/issues/5737)  
It seems to be of low priority since it has not updates for some time now but you can definitely follow any progress on this.

C.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 8, 2020, 10:38am UTC](https://discuss.elastic.co/t/filebeat-keystore-using-empty-password/236336/3 "2020-07-08T10:38:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.