Change Oracle Database User Password

To ensure security of the Oracle database system and prevent unauthorized access to the Oracle database, it’s important for Oracle users to not only using strong and long Oracle passwords to avoid brute force or dictionary attacks, but also to change the Oracle user password regularly. Oracle users also have to change the password when the password has or going to expire, if database system administrator implements and enforces strict password control with PASSWORD_LIFE_TIME option for user profiles which limits the number of days the password can be used for authentication to login to the system.

To change the Oracle password, users can use SQL*Plus or Oracle SQL and PL/SQL language interface administration tool such as Toad for Oracle. No matter what SQL apps you use, the commands and SQL query languages used to change the password are similar.

There are two SQL command syntaxes that can be used to change Oracle database user password:

ALTER USER user_name IDENTIFIED BY new_password;

or (from Oracle8 and above):

PASSWORD

For above SQL query, if you need to change another user’s password, use the following command:

PASSWORD user_name

For PASSWORD command, after you press Enter, you will be prompted to input the old password and new password interactively. For example:

SQL> password
Changing password for DAVID
Old password:
New password:
Retype new password:

Note: You need to have enough privileges to change other Oracle user’s password.

As the variable in italic implied by name, user_name is the user whose password wishes to be changed, and new_password is the new password to assign.

As ALTER USER SQL syntax will send the new password to the Oracle database server unencrypted if use without Advanced Security Option, and thus expose to security risk, Oracle users should always use the PASSWORD command to change the Oracle user password.

Related Articles

• Oracle Database Link
• How Drop Tablespace and Recover Oracle Database When Accidentally Delete Datafile
• Oracle EXP-00091 Error When Export Database
• How to Remove and Drop Datafiles from Tablespace in Oracle Database
• Oracle Database Import Error 3113/3114
• Create, Add or Split Oracle Database Partition Fails with ORA-14080 Error
• View and Retrieve Oracle Database Link Details
• Reset and Change Windows NT/2000 Administrator or User Password with chntpw in Linux
• IMP-00016 Required Character Set Conversion Not Supported Error when Import to Oracle Database
• How to Customize, Modify or Change WordPress Database Connection Error Page

This entry was posted on Tuesday, October 17th, 2006 at 8:31 pm and is filed under Databases. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.