Java reset keystore password | Weblogic

Oracle Weblogic Server

To change java keystore passwords, please follow below steps:

– Set the environment by running setDomainEnv.cmd. (WLS_HOME\user_projects\domains\<domain name>\bin)
– Then go to cacerts path (JAVA_HOME\lib\security\cacerts)
– Run the following command:

keytool -list -v -keystore cacerts

– It will prompt for password: enter the password (“changeit” is the default cacert password).
– Take a backup of the cacerts files.
– Run the following command:

keytool -storepasswd -keystore cacerts

– Confirm the password change by the following command:

keytool -list -v -keystore cacerts

– Now in the console you can apply the new password for the java keystore passphrase.

– Use the below command for changing the password of a custom keystore:

keytool -storepasswd -new new_storepass -keystore <your_custom_keystore.jks>


Example Ouput for cacerts:

C:\app\user_projects\domains\base_domain>cd C:\java\jdk160_18\jre\lib\security

C:\java\jdk160_18\jre\lib\security>keytool -list -v -keystore cacerts
Enter keystore password:

C:\app\user_projects\domains\base_domain>keytool -storepasswd -keystore cacerts

Enter keystore password:
New keystore password:
Re-enter new keystore password:



In case of any ┬ęCopyright or missing credits issue please check CopyRights page for faster resolutions.

Leave a Reply