# Kibana password protected?

**URL:** <https://discuss.elastic.co/t/kibana-password-protected/282214>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [August 23, 2021, 11:04am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214 "2021-08-23T11:04:05Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![selin](https://avatars.discourse-cdn.com/v4/letter/s/9de053/32.png) [@selin](https://discuss.elastic.co/u/selin)\
**Post date:** [August 23, 2021, 11:04am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214/1 "2021-08-23T11:04:05Z")

</div>

Hi friend can i know is the password of user login to kibana protected? Can anyone view the psssword?

What is xpack.security.encryptionKey

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 23, 2021, 10:11pm UTC](https://discuss.elastic.co/t/kibana-password-protected/282214/2 "2021-08-23T22:11:04Z")

</div>

Which user are you referring to here?

---

<div class="post-metadata">

**Author:** ![selin](https://avatars.discourse-cdn.com/v4/letter/s/9de053/32.png) [@selin](https://discuss.elastic.co/u/selin)\
**Post date:** [August 24, 2021, 1:18am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214/3 "2021-08-24T01:18:38Z")

</div>

> [@warkolm](#):
>
> Which user are you referring to here?

i am referring to the kibana user which i will create via users tab and assign role. is it protected. where it is stored?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 24, 2021, 3:42am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214/4 "2021-08-24T03:42:19Z")

</div>

The data for that user is stored in Elasticsearch.

---

<div class="post-metadata">

**Author:** ![selin](https://avatars.discourse-cdn.com/v4/letter/s/9de053/32.png) [@selin](https://discuss.elastic.co/u/selin)\
**Post date:** [August 24, 2021, 5:33am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214/5 "2021-08-24T05:33:51Z")

</div>

> [@warkolm](#):
>
> The data for that user is stored in Elasticsearch.

where is ti stored ya. I tried /security/user/\<user\_id\>?pretty

i cant view the password

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 24, 2021, 5:36am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214/6 "2021-08-24T05:36:24Z")

</div>

What exactly are you trying to achieve here?

---

<div class="post-metadata">

**Author:** ![selin](https://avatars.discourse-cdn.com/v4/letter/s/9de053/32.png) [@selin](https://discuss.elastic.co/u/selin)\
**Post date:** [August 24, 2021, 6:48am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214/7 "2021-08-24T06:48:10Z")

</div>

i want to verify the password is encrypted and not plain text so i can show to it security

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 21, 2021, 6:48am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214/8 "2021-09-21T06:48:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.