Password Authentication

This document describes how to manage passwords and enable multi-factor authentication (MFA) in the TiDB Cloud console. The document is only applicable to users who sign up for TiDB Cloud with emails and passwords.

Sign up

You can either sign up for TiDB Cloud with email and password, or choose your Google, GitHub, or Microsoft account for single sign-on (SSO) to TiDB Cloud.

• If you sign up for TiDB Cloud with email and password, you can manage your password according to this document.
• If you choose Google, GitHub, or Microsoft SSO to TiDB Cloud, your password is managed by your chosen platform and you cannot change it using the TiDB Cloud console.

To sign up for a TiDB Cloud account with email and password, take the following steps:

1. Go to the TiDB Cloud sign up page and fill in the registration information.

2. Read Privacy Policy and Services Agreement, and then select I agree to the Privacy Policy and Services Agreement.

3. Click Sign up.

You will receive a verification email for TiDB Cloud. To complete the whole registration process, check your email box and confirm the registration.

Sign in or sign out

Sign in

To log into TiDB Cloud using email and password, take the following steps:

1. Go to the TiDB Cloud login page.

2. Fill in your email and password.

3. Click Sign In.

If the login is successful, you will be directed to the TiDB Cloud console.

Sign out

In the lower-left corner of the TiDB Cloud console, click and select Logout.

Password policy

TiDB Cloud sets a default password policy for registered users. If your password does not meet the policy, you will get a prompt when you set the password.

The default password policy is as follows:

• At least 8 characters in length.
• At least 1 uppercase letter (A-Z).
• At least 1 lowercase letter (a-z).
• At least 1 number (0-9).
• A new password must not be the same as any of the previous four passwords.

Reset a password

If you forget your password, you can reset it by email as follows:

1. Go to the TiDB Cloud login page.

2. Click Forgot password, and then check your email for the link to reset the password.

Change a password

1. Click in the lower-left corner of the TiDB Cloud console.

2. Click Account Settings.

3. Click the Change Password tab, click Change Password, and then check your email for TiDB Cloud to reset the password.

Enable or disable MFA (optional)

After logging in to TiDB Cloud, you can enable MFA in accordance with laws and regulations.

Two-factor authentication (also known as MFA or 2FA) adds additional security by requiring an Authenticator app to generate a one-time password for login. You can use any Authenticator app from the iOS or Android App Store to generate this password, such as Google Authenticator and Authy.

Enable MFA

1. Click in the lower-left corner of the TiDB Cloud console.

2. Click Account Settings.

3. Click the Two Factor Authentication tab.

4. Click Enable.

5. Log out and then log back in. A QR code will appear, which you can scan using your authenticator app.

6. Enter the authentication code generated by your app.

Disable MFA

1. Click in the lower-left corner of the TiDB Cloud console.

2. Click Account Settings.

3. Click the Two Factor Authentication tab.

4. Click Disable.