{"id":20,"date":"2011-09-26T05:56:00","date_gmt":"2011-09-26T05:56:00","guid":{"rendered":"https:\/\/bijoos.com\/oraclenotes\/?p=20"},"modified":"2026-02-07T15:29:25","modified_gmt":"2026-02-07T21:29:25","slug":"passwords-are-case-sensitive-in-oracle11g","status":"publish","type":"post","link":"https:\/\/bijoos.com\/oraclenotes\/2011\/20\/","title":{"rendered":"Passwords are Case Sensitive in Oracle11g"},"content":{"rendered":"<div dir=\"ltr\">\n<div>The passwords in Oracle11g are case sensitive. All new users created in the 11g database have case sensitive password by default. For databases upgraded from earlier releases, the passwords are not case sensitive for existing accounts. They become case sensitive when you change password. A new column PASSWORD_VERSIONS is added to DBA_USERS view. A value \u201810G 11G\u2019 in this column indicates that case sensitivity is enforced for the account.<\/div>\n<div><\/div>\n<div>The PASSWORD column is still available in DBA_USERS view, it is not populated anymore. For external authenticated or global accounts, the PASSWORD column indicates such.<\/div>\n<div><\/div>\n<div>\n<pre class=\"lang:default decode:true \">select username, password_versions, password from dba_users;\n\nUSERNAME\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PASSWORD PASSWORD\n------------------------------ -------- ---------------\nMGMT_VIEW\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10G 11G\nSYS\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a010G 11G\nSYSTEM\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10G 11G\nSAMUEL\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 EXTERNAL\nBTHOMAS\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10G 11G\nANONYMOUS\nXDB\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10G 11G<\/pre>\n<p>&nbsp;<\/p>\n<\/div>\n<div><\/div>\n<div><b><span style=\"text-decoration: underline;\">Disable Case Sensitive Passwords<\/span><\/b><\/div>\n<div>Oracle11g has a new parameter to disable the password case sensitivity \u2013 SEC_CASE_SENSITIVE_LOGON. This parameter is set to TRUE by default. Change to FALSE for pre-Oracle11g password behavior. This parameter can be changed using ALTER SYSTEM.<\/div>\n<div><\/div>\n<div><b><span style=\"text-decoration: underline;\">SYSDBA\/SYSOPER password<\/span><\/b><\/div>\n<div>The password file created using orapwd utility is also case sensitive by default. To make the password for SYS and SYSDBA\/SYSOPER case insensitive, include flag ingnorecase=y in the command line.<\/div>\n<div><\/div>\n<div>\n<pre class=\"nums:false nums-toggle:false lang:default decode:true \">$ orapwd file=L11GR1.ora ignorecase=y\nEnter password for SYS:<\/pre>\n<p>&nbsp;<\/p>\n<\/div>\n<div><\/div>\n<div><b><span style=\"text-decoration: underline;\">DB Links<\/span><\/b><\/div>\n<div>When connecting to an Oracle11g database with default SEC_CASE_SENSITIVE_LOGON using a database link from pre-11g database, make sure the database password in Oracle11g database is set up as ALL UPPERCASE. Pre-Oracle11g databases send password in uppercase for db link connections. For 11g to 11g, the password case must be the same; for 11g to pre-11g database, the password case does not matter.<\/div>\n<table border=\"1\" cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td valign=\"top\" width=\"245\"><\/td>\n<td valign=\"top\" width=\"245\">\n<div>To Pre-Oracle11g<\/div>\n<\/td>\n<td valign=\"top\" width=\"245\">\n<div>To Oracle11g<\/div>\n<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"245\">\n<div>From Pre-Oracle11g<\/div>\n<\/td>\n<td valign=\"top\" width=\"245\">\n<div>Case does not matter<\/div>\n<\/td>\n<td valign=\"top\" width=\"245\">\n<div>Uppercase<\/div>\n<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"245\">\n<div>From Oracle11g<\/div>\n<\/td>\n<td valign=\"top\" width=\"245\">\n<div>Case does not matter<\/div>\n<\/td>\n<td valign=\"top\" width=\"245\">\n<div>Same case<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div><\/div>\n<div><b><span style=\"text-decoration: underline;\">Users with default passwords<\/span><\/b><\/div>\n<div>Oracle11g has a new very useful view to list the database accounts that have default password \u2013 DBA_USERS_WITH_DEFPWD. This view has only one column \u2013 USERNAME. By default the Oracle system accounts and example accounts are locked in Oracle11g.<\/div>\n<div><\/div>\n<div>\n<pre class=\"nums:false nums-toggle:false lang:default decode:true \">select * from dba_users_with_defpwd;\n\nUSERNAME\n------------------------------\nDIP\nMDSYS\nWK_TEST\nCTXSYS\nHR\nOUTLN\nEXFSYS\nSCOTT\nMDDATA\nORDPLUGINS\nORDSYS\nXDB\nSI_INFORMTN_SCHEMA\nWMSYS<\/pre>\n<p>&nbsp;<\/p>\n<\/div>\n<p><span>\u00a0<\/span><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The passwords in Oracle11g are case sensitive. All new users created in the 11g database have case sensitive password by default. For databases upgraded from earlier releases, the passwords are not case sensitive for existing accounts. They become case sensitive when you change password. A new column PASSWORD_VERSIONS is added to DBA_USERS view. A value &#8230; <a title=\"Passwords are Case Sensitive in Oracle11g\" class=\"read-more\" href=\"https:\/\/bijoos.com\/oraclenotes\/2011\/20\/\" aria-label=\"Read more about Passwords are Case Sensitive in Oracle11g\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[133],"tags":[134],"class_list":["post-20","post","type-post","status-publish","format-standard","hentry","category-oracledb","tag-oracle-11g"],"acf":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/posts\/20","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/comments?post=20"}],"version-history":[{"count":1,"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/posts\/20\/revisions"}],"predecessor-version":[{"id":2951,"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/posts\/20\/revisions\/2951"}],"wp:attachment":[{"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/media?parent=20"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/categories?post=20"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bijoos.com\/oraclenotes\/wp-json\/wp\/v2\/tags?post=20"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}