# Keycloak 17 - Can we encrypt the db-password and https-key-store-password in keycloak.conf file?

**URL:** <https://forum.keycloak.org/t/keycloak-17-can-we-encrypt-the-db-password-and-https-key-store-password-in-keycloak-conf-file/15110>\
**Category:** Getting advice\
**Created:** [April 22, 2022, 12:43pm UTC](https://forum.keycloak.org/t/keycloak-17-can-we-encrypt-the-db-password-and-https-key-store-password-in-keycloak-conf-file/15110 "2022-04-22T12:43:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![RisVer](https://avatars.discourse-cdn.com/v4/letter/r/858c86/32.png) [@RisVer](https://forum.keycloak.org/u/RisVer)\
**Post date:** [April 22, 2022, 12:43pm UTC](https://forum.keycloak.org/t/keycloak-17-can-we-encrypt-the-db-password-and-https-key-store-password-in-keycloak-conf-file/15110/1 "2022-04-22T12:43:33Z")

</div>

Hi,

I have successfully configured and deployed Keycloak 17.0.0 baremetal OpenJDK and have connected it to my Postgres database instance as well as configured for HTTPS.  
Is there any way to use encrypted values for db-password and https-key-store-password parameters in the keycloak.conf file as they are currently in plaintext? I cannot find any password encryption configuration in the Keycloak configurations page.

---

<div class="post-metadata">

**Author:** ![ajaiswal595](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/ajaiswal595/32/6789_2.png) [@ajaiswal595](https://forum.keycloak.org/u/ajaiswal595)\
**Post date:** [November 29, 2022, 8:48am UTC](https://forum.keycloak.org/t/keycloak-17-can-we-encrypt-the-db-password-and-https-key-store-password-in-keycloak-conf-file/15110/2 "2022-11-29T08:48:37Z")

</div>

> [@RisVer](#):
>
> db-password

@RisVer did you get the breakthrough?  
I’m also looking for a very similar solution.

---

<div class="post-metadata">

**Author:** ![RisVer](https://avatars.discourse-cdn.com/v4/letter/r/858c86/32.png) [@RisVer](https://forum.keycloak.org/u/RisVer)\
**Post date:** [November 29, 2022, 1:26pm UTC](https://forum.keycloak.org/t/keycloak-17-can-we-encrypt-the-db-password-and-https-key-store-password-in-keycloak-conf-file/15110/3 "2022-11-29T13:26:13Z")

</div>

@ajaiswal595 No, we were able to run it on quarkus using the plain-text password and couldn’t figure out a way to encrypt and pass that, and due to some other reasons we switched to using the going-to-be deprecated Wildfly versions of Keycloak instead.