---
title: Deprecated password storage schemes
description: PingDirectory server provides support for deprecating password storage schemes.
component: pingdirectory
version: 11.0
page_id: pingdirectory:pingdirectory_security_guide:pd_sec_deprecated_password_schemes
canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/pingdirectory_security_guide/pd_sec_deprecated_password_schemes.html
revdate: September 13, 2023
---

# Deprecated password storage schemes

PingDirectory server provides support for deprecating password storage schemes.

If a storage scheme is configured as deprecated, which can be done using the `deprecated-password-storage-scheme` property in the password policy configuration, any user who authenticates using a password encoded with that scheme using a mechanism that provides the server with access to the clear-text representation of that password automatically has their password re-encoded using the default scheme. This provides an excellent way to transparently migrate user passwords from weaker encodings to stronger ones without requiring users to change their passwords.

See the `config/sample-dsconfig-batch-files/deprecate-weak-password-storage-schemes.dsconfig` batch file for more information about deprecating password storage schemes.