Trust authentication


trust authentication is only suitable if you trust every user on every machine allowed to connect to the server by the ysql_hba.conf lines that specify trust. It is seldom reasonable to use trust for any TCP/IP connections other than those from localhost (

When trust authentication is specified, YugabyteDB assumes that any user trying to connect with the YB-TServer can access the database with the database user name they specify. This method is appropriate and very convenient for local connections to the YugabyteDB cluster.

By default, YugabyteDB cluster uses trust authentication. One can explicitly specify trust authentication by setting the following --ysql_hba_conf_csv flag:

--ysql_hba_conf_csv='host all all trust, host all all ::0/0 trust'

This enables trust authentication for all users.