Guys is there any way to store Redis password in configuration in an e

No. Redis doesn't support encrypted password. Especially for auth.

Note : The password is set by the system administrator in clear text inside the redis.conf file. It should be long enough to prevent brute force attacks.

The AUTH command, like every other Redis command, is sent unencrypted, so it does not protect against an attacker that has enough access to the network to perform eavesdropping.

Use use config set requirepass yourpassword to set password and this will not require a server restart but set it on-fly, but when the server is restarted your previous password(written in conf file)/no password(if it is not set) will be used to authenticate requests.

Check more here : https://redis.io/topics/security

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Pranam Bhat5y ago
No. Redis doesn't support encrypted password. Especially for auth.
Note : The password is set by the system administrator in clear text inside the redis.conf file. It should be long enough to prevent brute force attacks.
The AUTH command, like every other Redis command, is sent unencrypted, so it does not protect against an attacker that has enough access to the network to perform eavesdropping.
Use use config set requirepass yourpassword to set password and this will not require a server restart but set it on-fly, but when the server is restarted your previous password(written in conf file)/no password(if it is not set) will be used to authenticate requests.
Check more here : https://redis.io/topics/security
+1