Skip to content
pg_pwhash

pg_pwhash

pg_pwhash : Advanced password hashing methods for PostgreSQL

Overview

IDExtensionPackageVersionCategoryLicenseLanguage
7330
pg_pwhash
pg_pwhash
1.0
SEC
MIT
C
AttributeHas BinaryHas LibraryNeed LoadHas DDLRelocatableTrusted
--s-d-r
No
Yes
No
Yes
yes
no

RPM metadata shows license=PostgreSQL, but packaged LICENSE file is MIT

Packages

TypeRepoVersionPG Major CompatibilityPackage PatternDependencies
EXT
PGDG
1.0
18
17
16
15
14
pg_pwhash-
RPM
PGDG
1.0
18
17
16
15
14
pg_pwhash_$v-
DEB
PGDG
1.0
18
17
16
15
14
postgresql-$v-pg-pwhash-
Linux / PGPG18PG17PG16PG15PG14
el8.x86_64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
el8.aarch64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
el9.x86_64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
el9.aarch64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
el10.x86_64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
el10.aarch64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
d12.x86_64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
d12.aarch64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
d13.x86_64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
d13.aarch64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
u22.x86_64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
u22.aarch64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
u24.x86_64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
u24.aarch64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
u26.x86_64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
u26.aarch64
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PGDG 1.0
PackageVersionOSORGSIZEFile URL
pg_pwhash_181.0el8.x86_64pgdg31.2 KiBpg_pwhash_18-1.0-1PGDG.rhel8.10.x86_64.rpm
pg_pwhash_181.0el8.aarch64pgdg30.4 KiBpg_pwhash_18-1.0-1PGDG.rhel8.10.aarch64.rpm
pg_pwhash_181.0el9.x86_64pgdg33.0 KiBpg_pwhash_18-1.0-1PGDG.rhel9.8.x86_64.rpm
pg_pwhash_181.0el9.x86_64pgdg33.0 KiBpg_pwhash_18-1.0-1PGDG.rhel9.7.x86_64.rpm
pg_pwhash_181.0el9.x86_64pgdg33.1 KiBpg_pwhash_18-1.0-1PGDG.rhel9.6.x86_64.rpm
pg_pwhash_181.0el9.aarch64pgdg31.6 KiBpg_pwhash_18-1.0-1PGDG.rhel9.8.aarch64.rpm
pg_pwhash_181.0el9.aarch64pgdg31.6 KiBpg_pwhash_18-1.0-1PGDG.rhel9.7.aarch64.rpm
pg_pwhash_181.0el9.aarch64pgdg31.8 KiBpg_pwhash_18-1.0-1PGDG.rhel9.6.aarch64.rpm
pg_pwhash_181.0el10.x86_64pgdg32.9 KiBpg_pwhash_18-1.0-1PGDG.rhel10.2.x86_64.rpm
pg_pwhash_181.0el10.x86_64pgdg32.9 KiBpg_pwhash_18-1.0-1PGDG.rhel10.1.x86_64.rpm
pg_pwhash_181.0el10.x86_64pgdg33.3 KiBpg_pwhash_18-1.0-1PGDG.rhel10.0.x86_64.rpm
pg_pwhash_181.0el10.aarch64pgdg31.8 KiBpg_pwhash_18-1.0-1PGDG.rhel10.2.aarch64.rpm
pg_pwhash_181.0el10.aarch64pgdg31.8 KiBpg_pwhash_18-1.0-1PGDG.rhel10.1.aarch64.rpm
pg_pwhash_181.0el10.aarch64pgdg31.8 KiBpg_pwhash_18-1.0-1PGDG.rhel10.0.aarch64.rpm
postgresql-18-pg-pwhash1.0d12.x86_64pgdg56.1 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg12+3_amd64.deb
postgresql-18-pg-pwhash1.0d12.aarch64pgdg55.1 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg12+3_arm64.deb
postgresql-18-pg-pwhash1.0d13.x86_64pgdg56.7 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg13+3_amd64.deb
postgresql-18-pg-pwhash1.0d13.aarch64pgdg55.6 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg13+3_arm64.deb
postgresql-18-pg-pwhash1.0u22.x86_64pgdg56.5 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg22.04+3_amd64.deb
postgresql-18-pg-pwhash1.0u22.aarch64pgdg55.0 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg22.04+3_arm64.deb
postgresql-18-pg-pwhash1.0u24.x86_64pgdg55.9 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg24.04+3_amd64.deb
postgresql-18-pg-pwhash1.0u24.aarch64pgdg54.7 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg24.04+3_arm64.deb
postgresql-18-pg-pwhash1.0u26.x86_64pgdg56.9 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg26.04+3_amd64.deb
postgresql-18-pg-pwhash1.0u26.aarch64pgdg55.5 KiBpostgresql-18-pg-pwhash_1.0-2.pgdg26.04+3_arm64.deb

Source

Install

Make sure PGDG repo available:

pig repo add pgdg -u    # add pgdg repo and update cache

Install this extension with pig:

pig install pg_pwhash;		# install via package name, for the active PG version

pig install pg_pwhash -v 18;   # install for PG 18
pig install pg_pwhash -v 17;   # install for PG 17
pig install pg_pwhash -v 16;   # install for PG 16
pig install pg_pwhash -v 15;   # install for PG 15
pig install pg_pwhash -v 14;   # install for PG 14

Create this extension with:

CREATE EXTENSION pg_pwhash;

Usage

pg_pwhash: Advanced password hashing for PostgreSQL

pg_pwhash provides modern adaptive password hashing algorithms including Argon2, scrypt, and yescrypt for PostgreSQL.

CREATE EXTENSION pg_pwhash;

Supported Algorithms

IdentifierAlgorithmSalt Pattern
argon2iArgon2i$argon2i$v=19$m=4096,t=3,p=1$<salt>
argon2dArgon2d$argon2d$v=19$m=4096,t=3,p=1$<salt>
argon2idArgon2id$argon2id$v=19$m=4096,t=3,p=1$<salt>
scryptScrypt$scrypt$ln=16,r=8,p=1$<salt>
$7$Scrypt (crypt)$7$BU<salt>
yescryptyescrypt (crypt)$y$j9T$<salt>

Core Functions

Generate Salt and Hash

-- Argon2id (recommended)
SELECT pwhash_crypt('password', pwhash_gen_salt('argon2id'));
-- $argon2id$v=19$m=4096,t=3,p=1$<salt>$<hash>

-- Scrypt
SELECT pwhash_crypt('password', pwhash_gen_salt('scrypt'));

-- Yescrypt
SELECT pwhash_crypt('password', pwhash_gen_salt('yescrypt'));

Verify Password

-- Hash matches if output equals stored hash
SELECT stored_hash = pwhash_crypt('entered_password', stored_hash) AS valid;

Direct Hashing Functions

SELECT pwhash_argon2('password', pwhash_gen_salt('argon2id'));
SELECT pwhash_scrypt('password', pwhash_gen_salt('scrypt'));
SELECT pwhash_yescrypt_crypt('password', pwhash_gen_salt('yescrypt'));

Custom Salt Parameters

-- Argon2 with custom memory/time/parallelism
SELECT pwhash_gen_salt('argon2id', 'm=65536', 't=4', 'p=2');

-- Scrypt with custom parameters
SELECT pwhash_gen_salt('scrypt', 'ln=20', 'r=8', 'p=1');

Configuration

ParameterDescription
pg_pwhash.argon2_default_backendBackend for Argon2: libargon2 or openssl
Last updated on