auth_delay

pause briefly before reporting authentication failure

Overview

Package	Version	Category	License	Language
`auth_delay`	`-`	SEC	PostgreSQL	C

ID	Extension	Bin	Lib	Load	Create	Trust	Reloc	Schema
7970	`auth_delay`	No	Yes	Yes	No	No	No	-

Related	`pg_session_jwt` `login_hook` `set_user` `pg_auth_mon` `pgjwt` `pg_oidc_validator` `oidc_validator` `pg_permissions` `pgaudit`

PG18	PG17	PG16	PG15	PG14
-	-	-	-	-

Note: This is a built-in contrib extension of PostgreSQL

auth_delay: Pause before reporting authentication failure

auth_delay pauses the server briefly before reporting authentication failures, making brute-force password attacks more difficult.

Add to postgresql.conf:

shared_preload_libraries = 'auth_delay'
auth_delay.milliseconds = '500'

Parameter	Default	Description
`auth_delay.milliseconds`	`0`	Milliseconds to wait before reporting auth failure

Must be loaded via shared_preload_libraries
Does not prevent denial-of-service attacks (waiting processes still hold connection slots)
No CREATE EXTENSION is required – this is a shared library module only

Was this page helpful?

Thanks for the feedback! Please let us know how we can improve.