Terraform Random_Password

Generating secrets inside Terraform sounds convenient — until you hit questions around complexity rules, rotation, multi-user setups, and where those values end up (including Terraform state).

The random_password resource (from the Terraform Random provider) gives you a repeatable way to generate strong passwords with the exact constraints you need, while still keeping the workflow declarative and predictable.

In the full guide, we cover:

• How to generate variable-length passwords with specific character requirements
• Safer patterns for multi-user / multi-secret scenarios
• Storage considerations (including how to avoid accidental leakage and how to handle state)
• Importing existing passwords when you’re adopting IaC after the fact
• When to use random_password vs random_string (and why it matters)

➡️ Read the full article on our blog:

https://spacelift.io/blog/terraform-random-password