Skip to main content

Posts

Showing posts from April, 2026

Gradual Password Rollover in Oracle Database 19c: Secure Password Changes Without Downtime

Overview Gradual Password Rollover in Oracle allows both the old and new password to remain valid for a temporary period after a password change, helping applications avoid connection failures during credential updates. It is controlled using the profile parameter PASSWORD_ROLLOVER_TIME, which defines the grace period. This feature was first introduced in Oracle 21c and later backported to Oracle 19c starting from Release Update 19.12. In Oracle 19c, it is available only if the database is running 19.12 or higher. It is mainly used for seamless password rotation in application environments. Key Concept: PASSWORD_ROLLOVER_TIME The profile parameter PASSWORD_ROLLOVER_TIME defines the duration (in days, fractional values supported) during which both the old and new passwords remain valid after a password change. During this window, the user account enters the OPEN & IN ROLLOVER state, which is visible in DBA_USERS.ACCOUNT_STATUS . escription State Description OPEN Normal state. On...