Wiki / Configuration Parameters

When a password is specified in CREATE ROLE or ALTER ROLE, this parameter determines the algorithm to use to encrypt the password. Possible values are scram-sha-256, which will encrypt the password with SCRAM-SHA-256, and md5, which stores the password as an MD5 hash. The default is scram-sha-256. Note that older clients might lack support for the SCRAM authentication mechanism, and hence not work with passwords encrypted with SCRAM-SHA-256. See Section 20.5 for more details. Warning Support for MD5-encrypted passwords is deprecated and will be removed in a future release of PostgreSQL. Refer to Section 20.5 for details about migrating to another password type.

English manual coverage begins with PostgreSQL 7.4. Source history and runtime observations have their own recorded version boundaries.

boot val

scram-sha-256

category

Connections and Authentication / Authentication

context

user

documented

true

enumvals

md5, scram-sha-256

extra desc

Unknown

lang

en

max val

Unknown

metadata version

18

min val

Unknown

name

password_encryption

short desc

Chooses the algorithm for encrypting passwords.

source

pg-settings-source-snapshot

unit

Unknown

vartype

enum