Enable authentication in MongoDB

Introduction

In today's data-driven world, security is paramount. If you're using MongoDB, ensuring that your data is protected from unauthorized access is crucial. By default, MongoDB installations often run without authentication, leaving them vulnerable. This blog post will walk you through the essential steps to enable authentication and secure your MongoDB database.

Why Enable Authentication?

Data Protection: Authentication ensures that only authorized users can access your sensitive data.
Compliance: Many regulatory requirements mandate strong access controls for databases.
Peace of Mind: Knowing your data is secure provides invaluable peace of mind.

Steps to Enable MongoDB Authentication:

1. Create an Administrative User:

Before enabling authentication, you'll need an administrative user to manage your database.
This involves connecting to your MongoDB instance via the mongo (older version) or mongosh (newer version of mongoshell) shell and creating a user with the necessary roles (e.g., userAdminAnyDatabase or root).

bash

mongosh

shell

test> use admin
switched to db admin
admin> db.createUser(
  {
    user: "yourAdminUserName",
    pwd: "yourPassword",
    roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]
  }
)
 
# the response looks like this 
{ ok: 1 }
admin>

Then exit from the shell

shell

admin> exit

2. Modify the MongoDB Configuration File:

Locate your MongoDB configuration file (usually /etc/mongod.conf in Linux and Mac).
Open this in your text editor.
Within the security section, add or modify the authorization setting to enabled

bash

security:
  authorization: enabled

This tells MongoDB to require authentication for all connections.
After modifying the configuration file, restart your MongoDB service to apply the changes.

bash

sudo systemctl restart mongod.service

4. Connect with Authentication:

Now, when you connect to your MongoDB instance, you'll need to provide your credentials.

bash

mongosh -u username -p

It's best practice to create users with the least amount of privilege needed. Create users for specific databases, and give those users only the roles they requires.

Conclusion:

Enabling authentication is a fundamental step in securing your MongoDB database. By following these steps and adhering to best practices, you can protect your valuable data from unauthorized access.