4

pgAdmin 4 has a master password which

is required to secure and later unlock the saved server passwords. This is applicable only for desktop mode users.

enter image description here

I know my current master password, however, I want to change it without resetting it, as

Resetting the master password will also remove all saved passwords and close all existing established connections.

Is this possible?

1 Answer 1

5

Nope. Not possible. The reason is that the master password is the decryption key for the saved credentials. Changing the password changes the derived decryption key, which makes the existing data unretrievable (without a little effort and a recent backup). This bit from the documentation hints at how the password is used:

The master password is not stored anywhere on the physical storage. It is temporarily stored in the application memory and it does not get saved when the application is restarted.

One could argue that it should be possible to first decrypt the saved credentials with the existing key then re-encrypt with the new key, but the development team did not make that part of the software.

1
  • One could argue that it should be possible to first decrypt the saved credentials with the existing key then re-encrypt with the new key, yeah, that's what I was hoping for. The same way you could update the password of an encrypted volume or so.
    – Glorfindel
    Sep 1, 2021 at 14:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.