Documentation Grafana documentation Set up Configure security Configure authentication Basic auth

Configure basic authentication

Grafana provides a basic authentication system with password authentication enabled by default. This document details configuration options to manage and enhance basic authentication.

Disable basic authentication

To disable basic authentication, use the following configuration:

Bash Copy

[auth.basic]
enabled = false

Password policy

By default, Grafana’s password policy requires a minimum of four characters for basic auth users. For a stronger password policy, enable the password_policy configuration option.

With the password_policy option enabled, new and updated passwords must meet the following criteria:

• At least 12 characters
• At least one uppercase letter
• At least one lowercase letter
• At least one number
• At least one special character

Bash Copy

[auth.basic]
password_policy = true

Disable login form

To hide the Grafana login form, use the following configuration setting:

Bash Copy

[auth]
disable_login_form = true

This can be helpful in setups where authentication is handled entirely through external mechanisms or single sign-on (SSO).