PostgreSQL: credcheck v4.3 has been released

NewsBot · 27 December 2025 06:30

A new PostgreSQL blog post/announcement has been posted!

Dar es Salaam, Tanzania - December 23, 2025

PostgreSQL credcheck extension

The credcheck PostgreSQL extension provides few general credential checks, which will be evaluated during the user creation, during the password change and user renaming. By using this extension, we can define a set of rules:

allow a specific set of credentials

reject a certain type of credentials

deny password that can be easily cracked

enforce use of an expiration date with a minimum of day for a password

define a password reuse policy

define the number of authentication failure allowed before a user is banned

define a delay on authentication failures

force users to change their password after first login

throw a warning N days before when the password user is about to expire

Release 4.3 has been published, it fixes issues reported by users since last release.

Fix background workers crash when pg_cron is used and potentially others extension using background workers.

Only execute processUtility hook if we are at top level (not SPI re-enter).

Fix the "change password after first login" feature that was affecting all users connecting to the database instead of only the related user.

Upgrade require a PostgreSQL restart to reload the credcheck library.

Complete list of changes and acknowledgements are available here

Links & Credits

credcheck is an open project under the PostgreSQL license maintained by HexaCluster. Any contribution to build a better tool is welcome. You can send your ideas, features requests or patches using the GitHub tools.

Links :

Download: https://git...

Get the full details here: PostgreSQL: credcheck v4.3 has been released