DBeaver Documentation

DOWNLOAD pdf

Security

Note: This feature is available in Community, Lite, Enterprise and Ultimate editions only.

Overview

DBeaver has three password provider options:

  • Master password (recommended) – The most secure option for protecting sensitive data. Learn more
  • Automation (console) – Allows automated tasks to run without password prompts. Learn more
  • Integrated security – Uses your operating system’s security system to store passwords securely. Learn more

Note: For the Community Edition, Integrated Security is the only available option.

Changing the password provider

  1. Go to Window -> Preferences -> General -> Security.
  2. Select your preferred provider.
  3. Click Apply and follow prompts to confirm and update your settings.

Enabling database secure password storage

Note: This feature is available in Lite, Enterprise and Ultimate editions only.

By default, only global configuration settings are saved in secure storage. Otherwise, database credentials are kept in local configuration files. To store database connection credentials securely:

  1. In the Security tab, find the Encrypted Data section.
  2. Check Database connection credentials.
  3. Click Apply.

Advanced mode

Note: This feature is available in Lite, Enterprise and Ultimate editions only.

Use Advanced mode to gain full control over secure storage settings, including encryption preferences and management of individual secured resources.

  1. Navigate to Window -> Preferences -> General -> Security.
  2. In the Encrypted data section, click the See what secured data was saved button.

In the opened window:

  • The Contents tab allows you to:

    • Review the resources that are secured. This includes resources protected by the Master Password and those secured through integrated operating system (OS) security mechanisms.
    • Delete entries if necessary to remove security constraints from the resources.
  • The Advanced tab allows you to set the encryption algorithm for new storages.