# SYSUSERS system table

The SYSUSERS table stores user credentials when NATIVE authentication is enabled.

When SQL authorization is enabled (as it is, for instance, when NATIVE authentication is on) only the database owner can SELECT from this table, and no one, not even the database owner, can SELECT the PASSWORD column.

The following table shows the contents of the SYSUSERS system table.

Table 1. SYSUSERS system table
Column Name | Type | Length | Nullable | Contents
--- | --- | --- | --- | ---
USERNAME | VARCHAR | 128 | false | The user's name, the value of the `user` attribute on a connection URL.
HASHINGSCHEME | VARCHAR | 32672 | false | Describes how the password is hashed.
PASSWORD | VARCHAR | 32672 | false | The password after applying the HASHINGSCHEME.
LASTMODIFIED | TIMESTAMP | 29 | false | The time when the password was last updated.

Parent topic: Derby system tables