PGAdmin4 ask for master password

The new version of PGAdmin4 was installed on the server. Now when trying to access PGAdmin it is asking for a master password. This password wasn't saved and/or written down. Is there a way to bypass the master password?

Feb 18, 2021
Knowledge

Title

URL Name

pgadmin-4-ask-for-master-password

Article Number

000199878

Environment

Product: WS_FTP Server Version: 8.7 or above. OS: All supported platforms

Question/Problem Description

pgadmin
pgadmin4
master password
access
postgresql
PGAdmin 4 ask for master password
PGAdmin4 ask for master password

Steps to Reproduce

Clarifying Information

In recent versions of PGAdmin4 implemented a new feature to allow all passwords to be encrypted using a master password. This is enabled by default and will require the master password each time when accessing the PGAdmin.

The master password is not stored anywhere on the physical storage. It is temporarily stored in the application memory and it does not get saved when the application is restarted.

Error Message

Defect Number

Enhancement Number

Cause

Resolution

*** NOTE - This process is not supported by WS_FTP Support and is provided as a courtesy. No support will be given outside the contents of this article ***

To disable the master password do the following:

Locate the "Config.py" file. It's usually located in "C:\Program Files\PostgreSQL\12\pgadmin 4\web" or "C:\Program Files (X86)\pgAdmin4\v4\web" For PostgreSQL 14.5 included in WS_FTP Server 8.8 the location is "C:\Program Files\PostgreSQL\PGAdmin4\Web"
In this directory create a new file named "Config_local.py" and add the line MASTER_PASSWORD_REQUIRED = False. If the "Config_local.py" already exist, edit it, and add the line at the bottom of the file. Save the file.
Close PGAdmin4 and reopen it. You should now be able to access PGAdmin without the master password.

Since the master password is used to encrypt PostgreSQL passwords disabling this feature could cause issues with any passwords that were saved when it was enabled. If this is the case the PostgreSQL Admin password can be reset by following the procedures outlined in the article How to reset PostgreSQL admin password WS_FTP Server v8.6 and higher .

Workaround

Notes

If the master password is disabled, then the saved passwords will be encrypted using a key which is derived from information within the configuration database. Use of a master password ensures that the encryption key does not need to be stored anywhere, and thus prevents possible access to server credentials if the configuration database becomes available to an attacker.

It is strongly recommended that you use the master password if you use the Save Password option.

Keyword Phrase

Last Modified Date

1/4/2023 9:41 AM

PGAdmin4 ask for master password

Files(0)

Was this article helpful?

Was this article helpful?

PGAdmin4 ask for master password

Information

Related Articles