Home / Tools / Oracle password generator
Oracle Database credential

Oracle Password Generator

Create a database password for Oracle's ORA12C, strong, or STIG verification profiles using conservative single-byte characters that do not require double-quoting.

Generate an Oracle Database password

The 24-character default works across the supplied presets and remains under the 30-byte limit used by Oracle Database 19c and 21c.

Choose 8–30 ASCII characters. STIG requires at least 15.
The destination profile or custom function remains authoritative.
Excludes the user name and its reverse, case-insensitively.
Excludes the database name from generated candidates.

24 charactersORA12C verify65-character alphabet
Generated locallyThe optional names and generated password remain in this browser tab. Store the credential in a secret manager.

Oracle password requirements depend on the profile

Oracle supplies multiple password verification functions and permits administrators to create custom ones. A generated password can satisfy the documented composition rules, but only the destination database can evaluate its active profile, password history, database context, and deployment-specific restrictions.

ORA12C verify preset

ORA12C_VERIFY_FUNCTION requires at least eight characters, alphabetic and numeric characters, a special character, and checks involving the user name, database name, the word oracle, and the previous password. This preset includes uppercase, lowercase, digits, and Oracle-safe special characters, making it slightly stricter than the minimum category requirements.

ORA12C strong preset

ORA12C_STRONG_VERIFY_FUNCTION requires at least nine characters and at least two uppercase letters, two lowercase letters, two digits, and two accepted special characters. The generator enforces each of those counts and supports up to 30 single-byte characters for compatibility with Oracle Database 19c and 21c.

ORA12C STIG preset

ORA12C_STIG_VERIFY_FUNCTION requires at least 15 characters with at least one lowercase letter, uppercase letter, digit, and special character. It also checks that the new password differs sufficiently from the previous password. This tool cannot perform that history comparison because the old password should not be entered into a web page.

Version and service differences

Oracle Database 19c and 21c document a 30-byte maximum. Newer Oracle AI Database 26ai supports up to 1024 bytes, while Autonomous AI Database can apply a 12-byte minimum and cloud-specific verification functions. This tool deliberately caps output at 30 single-byte characters for broader compatibility; consult the exact destination service before assignment.

Why the password starts with a letter

Oracle documents that passwords beginning with a letter and containing letters, digits, $, #, or _ do not need double quotation marks. Every output follows that conservative syntax. The double-quotation character is never generated because Oracle's verification functions reject it internally.

Previous-password and custom-function checks

ORA12C profiles compare the new credential with the prior password, and organizations can attach their own PASSWORD_VERIFY_FUNCTION. A random result is likely to differ substantially, but this page does not request or inspect an existing secret. Let the database validate the candidate and regenerate if a local rule rejects it.

Assign the password securely

Oracle warns that a password embedded in a SQL statement can appear as cleartext in network trace files. Use native network encryption or TLS and avoid storing CREATE USER or ALTER USER statements containing credentials in source control, scripts, command history, or tickets.

Official Oracle sources

Preset rules follow Oracle's password-complexity function documentation. Length and quoting guidance follows Guidelines for Securing Passwords and Minimum Requirements for Passwords.

Related database tools

SQL Server password generator targets Windows-host policy and ODBC escaping. PostgreSQL password generator creates role credentials. MySQL password generator targets optional MEDIUM policy. Use this page for Oracle Database passwords.