Skip to content

Commit e0bff6b

Browse files
committed
DOC-4964 RS: Added change password hashing algorithm page under set password policies section and updated the password hashing note on the index page
1 parent 76270dd commit e0bff6b

File tree

2 files changed

+34
-1
lines changed

2 files changed

+34
-1
lines changed

content/operate/rs/security/access-control/manage-passwords/_index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,5 +25,5 @@ You can also manage a user's ability to [sign in]({{< relref "/operate/rs/securi
2525
To enforce more advanced password policies, we recommend using [LDAP integration]({{< relref "/operate/rs/security/access-control/ldap" >}}) with an external identity provider, such as Active Directory.
2626

2727
{{<note>}}
28-
Redis Enterprise Software stores all user passwords using the SHA-256 cryptographic hash function.
28+
Redis Enterprise Software securely stores all user passwords using a cryptographic hash function. The default password hashing algorithm is `SHA-256`, but you can [change the password hashing algorithm]({{<relref "/operate/rs/security/access-control/manage-passwords/password-hashing-algorithm">}}) to `PBKDF2` as of Redis Enterprise Software version 7.8.6-13.
2929
{{</note>}}
Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
---
2+
Title: Change the password hashing algorithm
3+
alwaysopen: false
4+
categories:
5+
- docs
6+
- operate
7+
- rs
8+
description: Change the password hashing algorithm for user passwords in a Redis Enterprise Software cluster.
9+
linkTitle: Password hashing algorithm
10+
toc: 'true'
11+
weight: 95
12+
---
13+
14+
Redis Enterprise Software securely stores all user passwords using a cryptographic hash function. The default password hashing algorithm is `SHA-256`, but `PBKDF2` is also supported as of Redis Enterprise Software version 7.8.6-13.
15+
16+
You can change the password hashing algorithm using [`rladmin`]({{<relref "/operate/rs/references/cli-utilities/rladmin">}}) or the [REST API]({{<relref "/operate/rs/references/rest-api">}}). When you change the password hashing algorithm, the cluster rehashes the administrator password and passwords for all users, including default users.
17+
18+
## Command-line method
19+
20+
To change the password hashing algorithm from the command line, run [`rladmin cluster change_password_hashing_algorithm`]({{<relref "/operate/rs/references/cli-utilities/rladmin/cluster/change_password_hashing_algorithm">}}):
21+
22+
```sh
23+
rladmin cluster change_password_hashing_algorithm PBKDF2
24+
```
25+
26+
## REST API method
27+
28+
You can [change the password hashing algorithm]({{<relref "/operate/rs/references/rest-api/requests/cluster/change_password_hashing_algorithm#patch-change-password-hashing-algorithm">}}) using a REST API request:
29+
30+
```sh
31+
PATCH /v1/cluster/change_password_hashing_algorithm
32+
{ "algorithm": "PBKDF2" }
33+
```

0 commit comments

Comments
 (0)