---
title: Check Out Account Password
slug: kronpam-reference-guide-3-6-0/check-out-account-password
description: Learn how to check out SAPM account passwords with this step-by-step guide. Discover how to navigate to the SAPM Management section, access the SAPM Accounts tab, and find your desired account. Enable the "Show Password" option and explore information on 
docTags: 
createdAt: 2022-07-29T09:46:22.000Z
---

Users with the necessary rights to see account passwords must check out the password. 

To check out the password:

1. Navigate to** Secrets > Vault.**
2. Open the **Vault** tab.
3. Search the **Account** from the **Advanced Search Box**.
4. Select **Check Out Password** from the **Options** menu for the desired account.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/U7FfP1606FgXT6y9UWz9B_image.png "Show Password option in the Password Vault Account Options Menu")

- **Enter Expiration Time and Comments.** Kron PAM automatically changes the password upon expiration. Existing sessions signed in with the old password can continue or be terminated during the password change process. To terminate sessions, the necessary commands must be added to post-command scripts. 
  -  Please refer to section [Configuration Properties to Execute Commands After Changing Passwords](docId\:aGj9RO-XvRHc-I8DtgKXH) for more information.
- Click the **Show** button.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/PDshS6oug28huDBCvhITE_image.png "Check Out Password")

- The password is shown in a hidden format in the Password pop-up window. 
- Click the eye icon to see the password, click the** Password** text box to copy the password to the clipboard, or click the **Send Mail **button to send it via email.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/DfbW4pb4CmdyFH5JG26o2_image.png "Pop-up check-out password ")

If the **Vault account**'s configuration type contains the value **SSH\_KEY**, the corresponding field has been expanded to display up to 65 characters to allow the full SSH\_KEY value to be visible. Additionally, a button has been added to the screen to allow the **SSH\_KEY** parameter to be copied. By pressing this button, the user can copy the SSH\_KEY value to the clipboard and use it wherever needed.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/YHNi-0R1-lG-XbOubil0t_image.png" size="56" width="338" height="418" position="center" showCaption="false"}

:::hint{type="info"}
- Possible values for the Expiration Time are configured with the **sapm.show\.password.expiration.time.values** property from the System Config. Man. screen. The default value is “5m,30m,2h,24h”. Options are separated with commas, “m” stands for minutes, and “h” stands for hours. 
-
  The minimum length of the comment (in characters) that should be entered during password check-out is configured with the **sapm.show\.password.comment.min.length** property from the System Config. Man. screen.
-
  The Send Mail button that appears in the** Check Out Password** popup can be removed, by configuring the **sapm.account.password.send.mail.button** parameter as **false** in the System Config Manager.
:::