Migrating users with passwords between Keycloak 14.0.0 and 21.0.2 #38795

helenraibb · 2025-04-09T14:44:32Z

helenraibb
Apr 9, 2025

I'm currently migrating one Keycloak instance to another and need to preserve passwords. The source keycloak is running 14.0.0 and the destination keycloak is running 21.0.2.
Current Status:

Successfully migrated realms, users with there corresponding roles
Missing password migration capability

What would be the recommended method to export password hashes from v14.0.0?

Tried kcadm.sh get users with various field parameters
Realm export via UI doesn't include credentials
Database dump appears to be the only option - is this accurate?

For importing to v21.0.2:

Are there compatibility issues between password hash formats across these versions?
Should we use direct DB import or the admin API?

Special considerations:

The instances are running different versions (14 → 21)
We have ~5,000 users to migrate
Need to maintain existing password policies

Are there any special considerations for maintaining password functionality during this migration? Any best practices or potential pitfalls I should be aware of?

Thank you in advance for your help!

Navigation Menu

Repository navigation

Migrating users with passwords between Keycloak 14.0.0 and 21.0.2 #38795

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Migrating users with passwords between Keycloak 14.0.0 and 21.0.2 #38795

Uh oh!

helenraibb Apr 9, 2025

Replies: 0 comments

helenraibb
Apr 9, 2025