Enabling Credential Protection ensures your database credentials are never stored within Upstash infrastructure. This enhances security by making credentials accessible only once—at the moment they are generated.
Credential Protection is a Production Pack feature.
How It Works#
When enabled:
- Redis database credentials are no longer stored in Upstash infrastructure
- Credentials are displayed only once during enablement - save them immediately
- Console features requiring database access are disabled (CLI, Data Browser, Monitor, ACL)
- In the Connect section of the Details tab, commands and connection strings use
YOUR_PASSWORDandYOUR_TOKENplaceholders, and SDK examples read the credentials from environment variables. Replace the placeholders with the credentials you saved.
Managing Credential Protection#
- Go to the database’s Settings tab → Configuration section
- Toggle Protect Credentials switch:
- Save the credentials shown in the modal:
When protection is enabled, the database details card shows a Protected field in place of the password and token. This field links to Settings → Protect Credentials.
Disabling this feature will permanently revoke current credentials and generate new ones, potentially breaking applications using those credentials.
What If You Lose Your Credentials#
Reset Credentials: This function remains available and, when credential protection is enabled, will generate new protected credentials. Navigate to the settings tab of your database and click Reset Credentials. You will be prompted to save the new credentials.
