Password Authentication

This document describes how to manage passwords and enable multi-factor authentication (MFA) in the TiDB Cloud console. The document is only applicable to users whosign upfor TiDB Cloud with emails and passwords.

Sign up

You can eithersign upfor TiDB Cloud with email and password, or choose your Google, GitHub, or Microsoft account for single sign-on (SSO) to TiDB Cloud.

• If you sign up for TiDB Cloud with email and password, you can manage your password according to this document.
• If you choose Google, GitHub, or Microsoft SSO to TiDB Cloud, your password is managed by your chosen platform and you cannot change it using the TiDB Cloud console.

To sign up for a TiDB Cloud account with email and password, take the following steps:

1. Go to the TiDB Cloudsign uppage and fill in the registration information.

2. Read Privacy Policy and Services Agreement, and then selectI agree to the Privacy Policy and Services Agreement.

3. ClickSign up.

You will receive a verification email for TiDB Cloud. To complete the whole registration process, check your email box and confirm the registration.

Sign in or sign out

Sign in

To log into TiDB Cloud using email and password, take the following steps:

1. Go to the TiDB Cloudloginpage.

2. Fill in your email and password.

3. ClickSign In.

If the login is successful, you will be directed to the TiDB Cloud console.

Sign out

In the lower-left corner of the TiDB Cloud console, click and selectLogout.

Password policy

TiDB Cloud sets a default password policy for registered users. If your password does not meet the policy, you will get a prompt when you set the password.

The default password policy is as follows:

• At least 8 characters in length.
• At least 1 uppercase letter (A-Z).
• At least 1 lowercase letter (a-z).
• At least 1 number (0-9).
• A new password must not be the same as any of the previous four passwords.

Reset a password

If you forget your password, you can reset it by email as follows:

1. Go to the TiDB Cloudloginpage.

2. ClickForgot password, and then check your email for the link to reset the password.

Change a password

1. Clickin the lower-left corner of the TiDB Cloud console.

2. ClickAccount Settings.

3. Click theChange Passwordtab, clickChange Password, and then check your email for TiDB Cloud to reset the password.

Enable or disable MFA (optional)

After logging in to TiDB Cloud, you can enable MFA in accordance with laws and regulations.

Two-factor authentication adds additional security by requiring an Authenticator app to generate a one-time password for login. You can use any Authenticator app from the iOS or Android App Store to generate this password, such as Google Authenticator and Authy.

Enable MFA

1. Clickin the lower-left corner of the TiDB Cloud console.

2. ClickAccount Settings.

3. Click theTwo Factor Authenticationtab.

4. ClickEnable.

Disable MFA

1. Clickin the lower-left corner of the TiDB Cloud console.

2. ClickAccount Settings.

3. Click theTwo Factor Authenticationtab.

4. ClickDisable.