Take a look at the docs here: https://keycloak.gitbooks.io/server-developer-guide/content/v/2.2/topics/.... Although, I would not recommend hashing to store passwords. Hashes were made to be fast and can be broken. That's why Keycloak has PBKDF2, or if you don't like it, try to implement your own with BCrypt or Scrypt, but never MD5[1]. [1] - https://cwe.mitre.org/data/definitions/327.html On 2016-09-29, Yunus ÖNCEL wrote: -- abstractj PGP: 0x84DC9914