2

How would I store passwords exclusively in PostgreSQL? I am aware of the pgcrypto library that can be used with PostgreSQL as is outlined here, or below:

INSERT INTO users (name, password) VALUES ('jdoe', crypt('password', gen_salt('md5')));

However, it is still possible that passwords would be stored in plain text within PostgreSQL server logs. Another complicating factor is I do not have direct control over the log configuration.

Is there any way to completely hide the values in a server column, even from the logs?

Community
  • 1
  • 1
Calebmer
  • 2,972
  • 6
  • 29
  • 36

0 Answers0