skills.rest
cockroachdb
cockroachdbOFFICIAL
Explore all skills by this author →
WebsiteGitHub

enforcing-password-policies

Configure password length, bcrypt cost, and login throttling on CockroachDB clusters.

3|3|Updated Mar 11, 2026
Search Tags:#security#authentication#compliance#password#cockroachdb#cluster-settings
One-click install
npx skills add https://github.com/cockroachdb/claude-plugin --skill enforcing-password-policies
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: enforcing-password-policies
Source: https://github.com/cockroachdb/claude-plugin/tree/main/skills/security-and-governance/enforcing-password-policies
Command: npx skills add https://github.com/cockroachdb/claude-plugin --skill enforcing-password-policies

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Configures and enforces password policies on CockroachDB clusters by setting minimum password length, bcrypt hash cost, and login throttling. Ensures password strength meets organizational and compliance requirements.

Core Features & Use Cases

  • Minimum password length: Enforce minimum length for new passwords across users.
  • Password hash cost: Configure bcrypt cost to balance security and performance.
  • Login throttling: Introduce delays after failed attempts to mitigate credential stuffing.
  • Use Case: Strengthen security for a new production cluster and meet SOC 2/HIPAA/NIST guidelines.

Quick Start

Set a policy that requires a minimum password length of 12, a bcrypt cost of 12, and throttling settings for failed logins on your CockroachDB cluster.

Frequently Asked Questions about enforcing-password-policies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce password policies on a CockroachDB cluster?▼

Enforce password policies on a CockroachDB cluster by modifying settings like min_password_length, crdb_bcrypt, and login throttling. This ensures password strength meets organizational and compliance requirements across environments.

How does login throttling mitigate credential stuffing in CockroachDB?▼

Login throttling mitigates credential stuffing in CockroachDB by introducing delays after failed authentication attempts. Configuring this cluster setting strengthens authentication security by slowing brute force attacks.

Can I configure bcrypt hash cost to balance security and performance in CockroachDB?▼

Configure the crdb_bcrypt cluster setting in CockroachDB to adjust password hash cost. This balances security and performance by determining the computational cost required to hash new passwords.

Does enforcing password policies on CockroachDB help meet SOC 2 or HIPAA compliance?▼

Enforcing password policies on CockroachDB helps meet SOC 2, HIPAA, and NIST compliance guidelines. Setting minimum password lengths and hash costs ensures authentication security aligns with regulatory requirements.

What are the limitations or rollback options when changing CockroachDB password policies?▼

When changing CockroachDB password policies, limitations include potential performance impacts from high bcrypt costs. The skill provides testing guidance and rollback options to revert cluster settings if enforcement validation fails.

Related Skills

Explore More Legal & Compliance Skills→
cockroachdbcockroachdb
3

configuring-audit-logging

Configure SQL audit logging on CockroachDB clusters for security events.

Official
Advanced
ayesha-aziz123ayesha-aziz123
2

better-auth-ts

Automate secure user authentication and session management for TypeScript applications.

Community
Advanced
pluginagentmarketplacepluginagentmarketplace
1

redis-security

Configure Redis authentication, ACLs, TLS, and network hardening.

Community
Advanced
bobmatnycbobmatnyc
68

better-auth-authentication

Implement email/password and OAuth authentication flows in TypeScript applications.

Community
Advanced