Configure strong passwords

Although the importance of passwords is well known, the following basic rule of security management is worth repeating: Ensure all your passwords are strong

You can strengthen passwords by creating and using password policies for your organization. For guidelines on securing passwords and for additional ways to protect passwords, refer to the Oracle Database Security Guide specific to the database release you are using.

You should modify the following passwords to use your policy-compliant strings:

• Passwords for the database default accounts, such as SYS and SYSTEM.
• Database application-specific schema accounts, such as ADT, HRLCORE, LOG, DUSB, XPID, ARRUSER, and GATEWAY.

Note:

Ensure that you do not set a password for the database listener in the listener.ora file. The local operating system authentication will secure the listener administration. The remote listener administration is disabled when the password is not set. This prevents brute force attacks on the listener password.