

NOTE: This is currently supported for Cookie authentication mode only. If you want to purchase a Swekey, it would be a good idea to visit, as this link provides funding for phpMyAdmin. When Swekey authentication is activated, phpMyAdmin requires the user’s Swekey to be plugged before entering the login page. The Swekey is a low cost authentication USB key that can be used in web applications. This mode is preferable in a multi-user environment with Web Hosting Control Panels such as cPanel or PLESK. This provides a convenient way of using credentials from another application to authenticate to phpMyAdmin.
#Phpmyadmin config http auth password
When access to phpMyAdmin is requested, phpMyAdmin uses the MySQL username and password from existing SSO session to sign in as the corresponding user. The user must have have already signed on to the SSO system. In Signon authentication mode, phpMyAdmin is integrated with SSO system. This mode provides security over the Config authentication mode and allows multiple users to use the same phpMyAdmin installation. The authentication process is performed via HTTP Basic Authentication and the look of the prompt is determined by the web browser. In HTTP authentication mode, phpMyAdmin prompts for a MySQL username and password via the web browser.


This mode is preferable for troubleshooting problems and single-user installations where root or some similar super-user is used for all administrative work. When prompted, you should enter the password for the root user on the remote machine. If you use config, you must place your server behind a firewall or use your webserver’s authentication and/or authorization methods. The following command will set up an SSH tunnel which will forward all requests made to port 3307 from your local machine to port 3306 on the remote machine: ssh -NL 3307:localhost:3306 rootREMOTEHOST. Also anyone who can read your file can read your username and password. This mode requires to store the username and password in phpMyAdmin configuration file.īut this does not password protect phpMyAdmin anyone who accesses the correct URL is logged directly in and can manipulate your server. NOTE: In this mode, having the mcrypt extension will speed up the access in phpMyAdmin.Ĭonfig authentication mode is the most basic authentication mode. This mode is preferable in a multi-user environment such as Shared hosting. This is also the only way by which one can log in, if an arbitrary server is enabled. With this mode, the user can truly log out of phpMyAdmin and log in back with the same username. Obviously the user must enable cookies in the browser, but this is now a requirement for all authentication modes. The entered password is stored and encrypted with the blowfish algorithm in a temporary cookie. In cookie authentication mode, phpMyAdmin prompts for a MySQL username and password in a HTML form. PhpMyAdmin authentication modes are given below.
