# How should I use keystore?

**URL:** <https://discuss.elastic.co/t/how-should-i-use-keystore/258475>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [December 12, 2020, 1:30pm UTC](https://discuss.elastic.co/t/how-should-i-use-keystore/258475 "2020-12-12T13:30:39Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Farid\_N](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/farid_n/32/74144_2.png) [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Post date:** [December 12, 2020, 1:30pm UTC](https://discuss.elastic.co/t/how-should-i-use-keystore/258475/1 "2020-12-12T13:30:39Z")

</div>

Hi  
I am using a cluster and also using x-pack security for passwords and...  
I have also activate transfer layer security between Elasticsearch nodes and Kibana (HTTPS)

My question is:  
How can I hide all of my password in .yml files or (the most important part) in "Create Pipelines" in Kibana? Because the guys who create new pipelines or even modify(in Kibana), they can see output password. Also, by viewing the .yml files, they can see clearly password

I am looking for a solution to hide all of these password... or for example, use a Keystore to put my passwords in there and put a key into my configuration files.

Would you help me please, how can I do this?

I already have read the link bellow:

> **[elasticsearch-keystore | Elasticsearch Reference \[7.10\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/elasticsearch-keystore.html#elasticsearch-keystore)**

Thank you in advance

---

<div class="post-metadata">

**Author:** ![Farid\_N](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/farid_n/32/74144_2.png) [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Post date:** [December 12, 2020, 1:47pm UTC](https://discuss.elastic.co/t/how-should-i-use-keystore/258475/2 "2020-12-12T13:47:10Z")

</div>

Does the bellow link will guide me?

> **[Security settings in Elasticsearch | Elasticsearch Reference \[7.x\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.x/security-settings.html#security-settings)**

---

<div class="post-metadata">

**Author:** ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Post date:** [December 12, 2020, 1:54pm UTC](https://discuss.elastic.co/t/how-should-i-use-keystore/258475/3 "2020-12-12T13:54:25Z")

</div>

Check these 2 links :

Kibana and how to add elasticsearch user & password to the keystore : [https://www.elastic.co/guide/en/kibana/current/secure-settings.html](https://www.elastic.co/guide/en/kibana/current/secure-settings.html)

Logstash and how to add elasticsearch user & password to the keystore : [https://www.elastic.co/guide/en/elasticsearch/reference/current/get-started-logstash-user.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/get-started-logstash-user.html)

Hope this can help

---

<div class="post-metadata">

**Author:** ![Farid\_N](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/farid_n/32/74144_2.png) [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Post date:** [December 13, 2020, 9:32am UTC](https://discuss.elastic.co/t/how-should-i-use-keystore/258475/4 "2020-12-13T09:32:47Z")

</div>

Thank you so much

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 10, 2021, 9:32am UTC](https://discuss.elastic.co/t/how-should-i-use-keystore/258475/5 "2021-01-10T09:32:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.