Re: password saved in .psql_history

On 2020-Aug-25, hans.wolters wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> Dear all,
> I noticed the password of a used is stored in the history of the psql user (postgres in my case). This happens when
alteruser <user> with password '<password>' is used.
 
> I suppose it is not a real bug but it might be handy to filter that for things like a history listing.

This is why you should use \password in psql instead of 'alter user ..
password'.  (Well, that and the server log and risk of unencrypted
password traffic.)

-- 
Álvaro Herrera                https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services