---
title: userPassword
description: Octet string known only to the user and the system to which the user has access.
component: pingds
version: 8.1
page_id: pingds:schemaref:at-userPassword
canonical_url: https://docs.pingidentity.com/pingds/8.1/schemaref/at-userPassword.html
---

# userPassword

Octet string known only to the user and the system to which the user has access.

Applications should prepare textual strings used as passwords by transcoding them to Unicode, applying SASLprep as described in [RFC 4013](https://www.rfc-editor.org/rfc/rfc4013.html) , and encoding as UTF-8. The client must determine whether a password is a textual string.

Passwords are not encrypted during transport. If the underlying transport is not secure, transmission can result in disclosure of the password to unauthorized parties.

|                             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
| --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| *OID*                       | 2.5.4.35                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| *Names*                     | userPassword                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| *Syntax*                    | [OctetString](s-OctetString.html)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| *Equality matching rule*    | [octetStringMatch](mr-octetStringMatch.html)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| *Ordering matching rule*    | [octetStringOrderingMatch](mr-octetStringOrderingMatch.html)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| *Single value*              | false: multiple values allowed                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| *User modification allowed* | true                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| *Usage*                     | userApplications                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| *Origin*                    | [RFC 4519](https://datatracker.ietf.org/doc/html/rfc4519)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| *Schema file*               | 00-core.ldif                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| *Used by*                   | [dNSDomain](oc-dNSDomain.html), [dmd](oc-dmd.html), [domain](oc-domain.html), [inetOrgPerson](oc-inetOrgPerson.html), [inetuser](oc-inetuser.html), [ipHost](oc-ipHost.html), [organization](oc-organization.html), [organizationalPerson](oc-organizationalPerson.html), [organizationalUnit](oc-organizationalUnit.html), [person](oc-person.html), [pilotOrganization](oc-pilotOrganization.html), [pilotPerson](oc-pilotPerson.html), [posixAccount](oc-posixAccount.html), [posixGroup](oc-posixGroup.html), [rFC822LocalPart](oc-rFC822LocalPart.html), [residentialPerson](oc-residentialPerson.html), [shadowAccount](oc-shadowAccount.html), [simpleSecurityObject](oc-simpleSecurityObject.html), [sunservicecomponent](oc-sunservicecomponent.html) |