IBM Support

SHA512 password encryption scheme (QPWDLVL 4)



The new SHA512 scheme is activated by setting the system value Password Level QPWDLVL to 4 or the System Service Tools (SST) password level to 3.


You are in: IBM i Technology Updates > IBM i Security > SHA512 password encryption scheme (QPWDLVL 4)
The new password levels use Password-based Key Derivation Function 2 (PBKDF2) with HMAC SHA512
(SHA-2 512 bit) encryption for the scheme.
New Password Level (QPWDLVL) system value (4)
  • When the system is changed to password level 4, the DES (password level 0/1) and SHA-1 (password level 2/3) passwords are removed from the user profile.
  • For more information, see the Planning password level changes topic in IBM Documentation.
New System Service Tools (SST) password level 3

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000C4BAAU","label":"IBM i"}],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.5.0"}]

Document Information

Modified date:
03 May 2022