CODEWITHSUNDEEP
postgresqlshapostgresql-9.5database-security
P_Ar
P_Ar

Reputation: 439

Change PostgreSQL password encryption from MD5 to SHA

Is there a way to change the PostgreSQL password encryption method from MD5 to SHA?

If Yes, can you please tell me how?

I am using PostgreSQL 9.5

Upvotes: 3

Views: 8085

Answers (1)

Evan Carroll
Evan Carroll

Reputation: 1

Pg 10

With PostgreSQL 10, you can set password_encryption to scram-sha-256. From the docs

When a password is specified in CREATE ROLE or ALTER ROLE without writing either ENCRYPTED or UNENCRYPTED, this parameter determines whether the password is to be encrypted. The default value is md5, which stores the password as an MD5 hash. Setting this to plain stores it in plaintext. on and off are also accepted, as aliases for md5 and plain, respectively. Setting this parameter to scram-sha-256 will encrypt the password with SCRAM-SHA-256.

See this post for information about iterations using scram-sha-256

Pg 9.x

This can not be done without actually modifying the source.

Upvotes: 2

Related Questions