public inbox for [email protected]  

help / color / mirror / Atom feed
From: HexaCluster via PostgreSQL Announce <[email protected]>
To: PostgreSQL Announce <[email protected]>
Subject: credcheck v4.5 has been released
Date: Mon, 09 Feb 2026 15:43:01 +0000
Message-ID: <[email protected]> (raw)

Casablanca, Morocco - Febuary 05, 2026

## PostgreSQL credcheck extension

The credcheck PostgreSQL extension provides few general credential checks, which will be evaluated during the user creation, during the password change and user renaming. By using this extension, we can define a set of rules:

  * allow a specific set of credentials
  * reject a certain type of credentials
  * deny password that can be easily cracked
  * enforce use of an expiration date with a minimum of day for a password
  * define a password reuse policy
  * define the number of authentication failure allowed before a user is banned
  * define a delay on authentication failures
  * force users to change their password after first login
  * throw a warning N days before when the password user is about to expire

Release 4.5 has been published, it fixes several issues reported by users since last release.

  - Fix error cannot change data type of view column "roleid" from oid to regrole.
  - Add missing upgrade SQL file from 4.3 to 4.4.
  - Fix error when the user want to modify his password and
    credcheck.password_valid_until option is set.  As we modify
    the VALID UNTIL clause it will generate an error message when
    the user changes his password:
         Only roles with the CREATEROLE attribute and the ADMIN
         option on role "..." may alter this role.
  - Set the tzp argument in timestamp2tm() call to apply timezone to converted
    timestamp.

Upgrade require a PostgreSQL restart to reload the credcheck library.

Complete list of changes and acknowledgements are available [here](https://github.com/HexaCluster/credcheck/releases/tag/v4.5)

## Links & Credits

credcheck is an open project under the PostgreSQL license maintained by [HexaCluster](https://github.com/HexaCluster/credcheck/).
Any contribution to build a better tool is welcome. You can send your ideas, features requests or patches
using the GitHub tools.

**Links :**

* Download:  [https://github.com/HexaCluster/credcheck/releases/](https://github.com/HexaCluster/credcheck/releases/)
* Support: use GitHub report tool at [https://github.com/HexaCluster/credcheck/issues](https://github.com/HexaCluster/credcheck/issues)

## About credcheck

The credcheck extension is developed and maintained by Gilles Darold at [https://hexacluster.ai](HexaCluster Corp). If you need more information please [https://hexacluster.ai/contact-us/](contact us).

Documentation at [https://github.com/HexaCluster/credcheck#readme](https://github.com/HexaCluster/credcheck#readme)

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: credcheck v4.5 has been released
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox