# How to define Kibana/Logstash password encrypted

**URL:** <https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850>\
**Category:** Logstash\
**Tags:** elastic-stack-security\
**Created:** [February 26, 2016, 1:16pm UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850 "2016-02-26T13:16:56Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Emmanuel\_DEMEY](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emmanuel_demey/32/7912_2.png) [@Emmanuel\_DEMEY](https://discuss.elastic.co/u/Emmanuel_DEMEY)\
**Post date:** [February 26, 2016, 1:16pm UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/1 "2016-02-26T13:16:56Z")

</div>

Hi everyone,

I am working with Shield, and I have a question about the configuration of the Kibana or Logstash user in their corresponding configuration file.

Is it possible to encrypt password for thes users ? in order to avoid to put them in the plain text in logstash or kibana.yml configuration file ?

For example, in your documentation, you have this kibana configuration :

elasticsearch.username: kibana4-server  
elasticsearch.password: password

But "password" is in plain text...

Thanks

Manu

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 26, 2016, 11:30pm UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/2 "2016-02-26T23:30:53Z")

</div>

Currently this is not possible, it's something we are working on though (I can't give an ETA).

---

<div class="post-metadata">

**Author:** ![kelpau](https://avatars.discourse-cdn.com/v4/letter/k/e56c9b/32.png) [@kelpau](https://discuss.elastic.co/u/kelpau)\
**Post date:** [March 10, 2016, 6:46am UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/3 "2016-03-10T06:46:24Z")

</div>

Hi Mark - this is also an important one for us too;

---

<div class="post-metadata">

**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\
**Post date:** [March 10, 2016, 11:12am UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/4 "2016-03-10T11:12:39Z")

</div>

Is it really encryption that you are seeking or obfuscation? If you would like encryption, then where would the key be stored or how would it be retrieved?

---

<div class="post-metadata">

**Author:** ![piyush](https://avatars.discourse-cdn.com/v4/letter/p/ecb155/32.png) [@piyush](https://discuss.elastic.co/u/piyush)\
**Post date:** [October 18, 2016, 11:11pm UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/5 "2016-10-18T23:11:04Z")

</div>

Hi Team,  
Is there a way we can use environment variables for username/password? please let me know how.

I tried profile values but it's not working:

1:  
elasticsearch.username: $kibanauser  
elasticsearch.password: $kibanapwd

2:  
elasticsearch.username: "$kibanauser"  
elasticsearch.password: "$kibanapwd"

For plain text it's working fine.

Thanks & Regards,

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 19, 2016, 1:03am UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/6 "2016-10-19T01:03:25Z")

</div>

Please start your own thread.

---

<div class="post-metadata">

**Author:** ![piyush](https://avatars.discourse-cdn.com/v4/letter/p/ecb155/32.png) [@piyush](https://discuss.elastic.co/u/piyush)\
**Post date:** [October 19, 2016, 9:03pm UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/7 "2016-10-19T21:03:07Z")

</div>

Hey Mark, what's going on. When i posted my question here you only said "please start your own thread"

Now when i opened a new thread you are redirecting me to this thread again and you closed my thread"kibana password encapsulation" ??? wow...

why can't you just answer, below is in place or not in kibana-4.5.0?

 ![](https://us1.discourse-cdn.com/elastic/original/2X/e/e62406947e3879b96e545cd7089f29550c4fc848.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 19, 2016, 9:27pm UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/8 "2016-10-19T21:27:20Z")

</div>

That was my mistake.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:41pm UTC](https://discuss.elastic.co/t/how-to-define-kibana-logstash-password-encrypted/42850/9 "2017-07-06T13:41:33Z")

</div>


