Enforcing Password Policies

Configures and enforces password policies on CockroachDB clusters by setting minimum password length and bcrypt hash cost. Ensures password strength meets organizational and compliance requirements.

When to Use This Skill

• Strengthening password requirements to meet compliance standards (SOC 2, HIPAA, NIST 800-63B)
• Setting up password policies for a new production cluster
• Responding to a security audit finding about weak password policies
• Increasing bcrypt hash cost to improve resistance against brute-force attacks

Prerequisites

• SQL access with admin role (required to modify cluster settings)
• Understanding of impact: Password policy changes affect new passwords only, not existing passwords