Configure strong passwords on the database
Make sure all your passwords are strong passwords. Oracle recommends that you use a mix of uppercase and lowercase letters, numbers, and symbols.
You can strengthen passwords by creating and using password policies for your organization. For guidelines on securing passwords and for additional ways to protect passwords, see the Oracle Database Security Guide specific to the database release you are using.
You must modify the following passwords so that they comply with your password policies, such as a minimum length or character requirements:
- Passwords for the database default accounts, such as SYS and SYSTEM.
- Passwords for the database application-specific schema accounts.
Additionally, you should not configure a password for the database listener because a configured password enables remote administration. For more information, see Removing the Listener Password in the documentation for Oracle® Database Net Services Reference 12c Release.
For more information about configuring strong passwords, see the Security Guide for Oracle Database 12c Release.
Parent topic: Password security principles