v.22.6New Feature

Explicit SALT Specification for CREATE USER with sha256_hash

Explicit SALT specification is allowed for CREATE USER <user> IDENTIFIED WITH sha256_hash. #37377 (Yakov Olkhovskiy).
Allows explicit specification of SALT when creating users with sha256_hash authentication in ClickHouse.

Why it matters

This feature enables administrators to define a custom SALT value for users authenticated with the sha256_hash method, improving security control and flexibility over password hashing.

How to use it

When creating a user with the sha256_hash authentication method, utilize the SALT clause in the CREATE USER statement as follows:

CREATE USER &lt;user&gt; IDENTIFIED WITH sha256_hash BY '<password_hash>' SALT '<custom_salt_value>'