Redis server by default is not password protected.
There are two ways to change the password for the redis server.
- using command line
- Directly modifying redis.conf file
Redis set or change password
First check Password is set or not using the auth password
command
127.0.0.1:6379> auth password
(error) ERR Client sent AUTH, but no password is set
It looks like the password is not set for the Redis server.
Let’s see how to change the password in multiple ways
- using config set
With interactive cli, you can change the password using CONFIG SET
CONFIG SET requirepass "12345"
requirepass is a configuration parameter for changing the password. It is not required to have a downtime and changes the password at runtime. This will set the password for the redis server for current access only. if we restart the server, changes are lost.
To save these changes and run the below command
CONFIG REWRITE
It will work for the next restart onwards
- using redis.conf file
Redis.conf file contains security related configured uncommented as seen below
Change from
# requirepass foobared
to
# requirepass 123467
Save the file.
Now, Restart or stop and start the server to reload changes.
Now, the Redis server is password protected.
Any client who wants to communicate with the server needs to provide the -a password
option.
redis-cli -h 127.0.0.1 -p 6379 -a password