The default is an empty password. Unfortunately, keytool does not accept an empty password in some cases, so it’s a bit annoying to work with. The keys themselves also have an empty password.
If you’re planning on creating a new keystore, you can set a password for it and the keys and then put the password in a ‘datakeys.pass’ file that is in the same directory as the ‘datakeys.jks’ file.
