enforcing-password-policies

What problem does it solve?

Configures and enforces password policies on CockroachDB clusters by setting minimum password length, bcrypt hash cost, and login throttling. Ensures password strength meets organizational and compliance requirements.

Core Features & Use Cases

• Minimum password length: Enforce minimum length for new passwords across users.
• Password hash cost: Configure bcrypt cost to balance security and performance.
• Login throttling: Introduce delays after failed attempts to mitigate credential stuffing.
• Use Case: Strengthen security for a new production cluster and meet SOC 2/HIPAA/NIST guidelines.

Quick Start

Set a policy that requires a minimum password length of 12, a bcrypt cost of 12, and throttling settings for failed logins on your CockroachDB cluster.