diff --git a/group_vars/all.yml b/group_vars/all.yml
index 66e900e..9adc27a 100644
--- a/group_vars/all.yml
+++ b/group_vars/all.yml
@@ -16,6 +16,6 @@ secure_configuration: false
 
 scripts_dir: "/home/oracle/scripts"
 
-# Mots de passe utilisateurs système (hashés pour /etc/shadow)
-oracle_user_password: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0"
-grid_user_password: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0"
\ No newline at end of file
+# Mots de passe utilisateurs système (en clair - seront hashés automatiquement)
+oracle_user_password: "Oracle123"
+grid_user_password: "Grid123"
\ No newline at end of file
diff --git a/roles/oracle-db-preinstall/tasks/users_configuration.yml b/roles/oracle-db-preinstall/tasks/users_configuration.yml
index ebf00df..f30e1a1 100644
--- a/roles/oracle-db-preinstall/tasks/users_configuration.yml
+++ b/roles/oracle-db-preinstall/tasks/users_configuration.yml
@@ -52,8 +52,8 @@
       update_password: on_create
       password: "{{ item.passwd }}"
     loop:
-       - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,racdba,oper", passwd: "{{ oracle_user_password }}" }
-       - { username: grid, uid: 1002, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,racdba,asmoper,asmadmin", passwd: "{{ grid_user_password }}" }
+       - { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,racdba,oper", passwd: "{{ oracle_user_password | password_hash('sha512') }}" }
+       - { username: grid, uid: 1002, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,racdba,asmoper,asmadmin", passwd: "{{ grid_user_password | password_hash('sha512') }}" }
     when: full_configuration |bool and item.username not in (user_facts.ansible_facts.getent_passwd | default({}))
     tags: user