Password Authentication

This document describes how to manage passwords and enable multi-factor authentication (MFA) in the TiDB Cloud console. The document is only applicable to users who sign up for TiDB Cloud with emails and passwords.

Sign up

You can either sign up for TiDB Cloud with email and password, or choose your Google, GitHub, or Microsoft account for single sign-on (SSO) to TiDB Cloud.

• If you sign up for TiDB Cloud with email and password, you can manage your password according to this document.
• If you choose Google, GitHub, or Microsoft SSO to TiDB Cloud, your password is managed by your chosen platform and you cannot change it using the TiDB Cloud console.

To sign up for a TiDB Cloud account with email and password, take the following steps:

1. Go to the TiDB Cloud sign up page and fill in the registration information.

2. Read Privacy Policy and Services Agreement, and then select I agree to the Privacy Policy and Services Agreement.

3. Click Sign up.

You will receive a verification email for TiDB Cloud. To complete the whole registration process, check your email box and confirm the registration.

Sign in or sign out

Sign in

To log into TiDB Cloud using email and password, take the following steps:

1. Go to the TiDB Cloud login page.

2. Fill in your email and password.

3. Click Sign In.

If the login is successful, you will be directed to the TiDB Cloud console.

Sign out

In the lower-left corner of the TiDB Cloud console, click and select Logout.

Password policy

TiDB Cloud sets a default password policy for registered users. If your password does not meet the policy, you will get a prompt when you set the password.

The default password policy is as follows:

• At least 8 characters in length.
• At least 1 uppercase letter (A-Z).
• At least 1 lowercase letter (a-z).
• At least 1 number (0-9).
• A new password must not be the same as any of the previous four passwords.

Reset a password

If you forget your password, you can reset it by email as follows:

1. Go to the TiDB Cloud login page.

2. Click Forgot password, and then check your email for the link to reset the password.

Change a password

1. Click in the lower-left corner of the TiDB Cloud console.

2. Click Account Settings.

3. Click the Change Password tab, click Change Password, and then check your email for TiDB Cloud to reset the password.

Manage multi-factor authentication (optional)

Multi-factor authentication (MFA) adds additional security by requiring an Authenticator app to generate a one-time verification code for login. When you log in, TiDB Cloud verifies both your password and the MFA verification code. You can use any Authenticator app from the iOS or Android App Store to generate this password, such as Google Authenticator and Authy.

Enable MFA

1. Click in the lower-left corner of the TiDB Cloud console.

2. Click Account Settings.

3. Click the Multi-Factor Authentication tab.

4. Click Enable.

5. Enter your account password to confirm your identity.

6. In the Set Up Authenticator App section, use your authenticator app to scan the QR code and associate your MFA device.

7. Enter the authentication code generated by your app to complete the MFA device association.

8. Save the one-time recovery code, which helps you authenticate if your MFA device is unavailable.

Disable MFA

1. Click in the lower-left corner of the TiDB Cloud console.

2. Click Account Settings.

3. Click the Multi-Factor Authentication tab.

4. Click Disable.

5. In the Disable Multi-Factor Authentication section, enter your account password and MFA authentication code to confirm the operation.