How To Create Password File

How To Create Password File

Creating Oracle Database Password Files

Introduction

Oracle database password files store privileged user credentials (like SYS and SYSTEM) to enable remote database administration. This guide covers creating password files in both Windows and Linux environments with security best practices.

Password File Basics

• Stores encrypted passwords for users with SYSDBA, SYSOPER, and SYSASM privileges
• Required for remote database administration
• File naming conventions differ by OS
• Created using the orapwd utility

Windows Environment

Step-by-Step Instructions

1. Open Command Prompt as Administrator
2. Navigate to ORACLE_HOME:

   cd %ORACLE_HOME%\database

3. Create the password file:

   orapwd file=%ORACLE_HOME%\database\pwdORCL.ora password=Str0ngP@ssw0rd entries=30 ignorecase=n force=y

Parameter Explanation:

• file: Path and filename (convention: pwd[SID].ora)
• password: Password for SYS and other privileged users
• entries: Maximum number of privileged users
• ignorecase: Case sensitivity (n=case sensitive)
• force: Overwrite existing file (y=yes)

Linux/Unix Environment

Step-by-Step Instructions

1. Open terminal as oracle user
2. Navigate to $ORACLE_HOME/dbs
3. Create the password file:

   orapwd file=$ORACLE_HOME/dbs/orapwORCL password=V3ryS3cureP@ss entries=20 force=y

Security Considerations

File Protection

• Restrict read access to DBAs only
• Monitor for unauthorized changes

Password Complexity

• Minimum 12 characters
• Mix uppercase, lowercase, numbers, special characters
• Avoid dictionary words