enforcing-password-policies

Name: enforcing-password-policies
Availability: InStock
Author: CockroachDB

Configure password length, bcrypt cost, and login throttling on CockroachDB clusters.

3|3|Updated Mar 11, 2026

Search Tags:#security #authentication #compliance #password #cockroachdb #cluster-settings

Ready to run

npx skills add https://github.com/cockroachdb/claude-plugin --skill enforcing-password-policies

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: enforcing-password-policies
Source: https://github.com/cockroachdb/claude-plugin/tree/main/skills/security-and-governance/enforcing-password-policies
Command: npx skills add https://github.com/cockroachdb/claude-plugin --skill enforcing-password-policies

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Configures and enforces password policies on CockroachDB clusters by setting minimum password length, bcrypt hash cost, and login throttling. Ensures password strength meets organizational and compliance requirements.

Core Features & Use Cases

Minimum password length: Enforce minimum length for new passwords across users.
Password hash cost: Configure bcrypt cost to balance security and performance.
Login throttling: Introduce delays after failed attempts to mitigate credential stuffing.
Use Case: Strengthen security for a new production cluster and meet SOC 2/HIPAA/NIST guidelines.

Quick Start

Set a policy that requires a minimum password length of 12, a bcrypt cost of 12, and throttling settings for failed logins on your CockroachDB cluster.

Frequently Asked Questions about enforcing-password-policies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce password policies on a CockroachDB cluster?▼

Enforce password policies on a CockroachDB cluster by modifying settings like min_password_length, crdb_bcrypt, and login throttling. This ensures password strength meets organizational and compliance requirements across environments.

How does login throttling mitigate credential stuffing in CockroachDB?▼

Login throttling mitigates credential stuffing in CockroachDB by introducing delays after failed authentication attempts. Configuring this cluster setting strengthens authentication security by slowing brute force attacks.

Can I configure bcrypt hash cost to balance security and performance in CockroachDB?▼

Configure the crdb_bcrypt cluster setting in CockroachDB to adjust password hash cost. This balances security and performance by determining the computational cost required to hash new passwords.

Does enforcing password policies on CockroachDB help meet SOC 2 or HIPAA compliance?▼

Enforcing password policies on CockroachDB helps meet SOC 2, HIPAA, and NIST compliance guidelines. Setting minimum password lengths and hash costs ensures authentication security aligns with regulatory requirements.

What are the limitations or rollback options when changing CockroachDB password policies?▼

When changing CockroachDB password policies, limitations include potential performance impacts from high bcrypt costs. The skill provides testing guidance and rollback options to revert cluster settings if enforcement validation fails.