A master password is required to secure and later unlock the saved server passwords. This is applicable only for desktop mode users.

  • You are prompted to enter the master password when you open the window for the first time after starting the application.
  • Once you set the master password, all the existing saved passwords will be re-encrypted using the master password.
  • The server passwords which are saved in the SQLite DB file are encrypted and decrypted using the master password.
Set master password
  • You can disable the master password by setting the configuration parameter MASTER_PASSWORD_REQUIRED=False . See Desktop Deployment for more information.

Note

If the master password is disabled, then all the saved passwords will be removed.

Warning

If the master password is disabled, then the saved passwords will be encrypted using a key which is derived from information within the configuration database. Use of a master password ensures that the encryption key does not need to be stored anywhere, and thus prevents possible access to server credentials if the configuration database becomes available to an attacker.

It is strongly recommended that you use the master password if you use the Save Password option.

  • The master password is not stored anywhere on the physical storage. It is temporarily stored in the application memory and it does not get saved when the application is restarted.
  • You are prompted to enter the master password when pgAdmin server is restarted.
Enter master password
  • If you forget the master password, you can use the Reset Master Password button to reset the password.
Reset master password

Warning

Resetting the master password will also remove all saved passwords and close all existing established connections.