All 7 Redis Security & ACL questions
More in Redis Security & ACL
What is Redis ACL, and how does it provide more granular access control than a single shared password? How do you create a Redis ACL user with permissions restricted to only specific commands and a specific pattern of keys? What are Redis ACL categories, and how do they simplify granting permissions for groups of related commands? What are some general security best practices to follow when deploying Redis, beyond just setting a password? How would you design a comprehensive Redis ACL strategy for an organization with multiple applications and teams accessing the same Redis infrastructure? How do you secure Redis network communication using TLS encryption, and what performance considerations come with enabling it?
Advertisement
Redis › Redis Security & ACL

How do you set a password to require authentication before clients can execute commands on a Redis instance?

Beginner

Answer

You set the requirepass configuration option to a strong password value, after which any client attempting to connect must first successfully authenticate using the AUTH command with that exact password before it will be allowed to run any other commands against the server.
CONFIG SET requirepass 'a_very_strong_password'
-- Clients must then authenticate first
AUTH a_very_strong_password
Real-world example A company enables password authentication on their Redis instance before deploying it to production, ensuring anyone who somehow gains network access still cannot read or modify data without knowing the correct password.

Common follow-ups: Where is the safest place to store this password for an application to use?;What happens if a client tries to run a command without first authenticating?

Redis Security & ACL;Redis Architecture & Installation
All 7 Redis Security & ACL questions