--- title: Secure Redis Authentication Using Teleport Database Access description: A step-by-step guide covers securing a Redis instance using Teleport Database Access, including blocking public internet exposure, creating a dedicated Redis... canonical: https://daily.dev/posts/secure-redis-authentication-using-teleport-database-access-8t4etbndt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Secure Redis Authentication Using Teleport Database Access | daily.dev og:description: A step-by-step guide covers securing a Redis instance using Teleport Database Access, including blocking public internet exposure, creating a dedicated Redis... og:url: https://daily.dev/posts/secure-redis-authentication-using-teleport-database-access-8t4etbndt og:image: https://api.daily.dev/og/posts/8t4eTBnDt.png og:image:alt: Secure Redis Authentication Using Teleport Database Access og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Secure Redis Authentication Using Teleport Database Access **[Teleport](https://daily.dev/sources/teleport)** · 5 min read · 0 upvotes · 0 comments ## Summary A step-by-step guide covers securing a Redis instance using Teleport Database Access, including blocking public internet exposure, creating a dedicated Redis user with ACLs and a hashed password, setting up the Teleport Database Service, exporting Teleport's certificate authority, configuring mutual TLS in redis.conf, connecting via tsh commands, and auditing Redis access through Teleport's logs. Redis 6+ is required for ACL support. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I set up mutual TLS authentication for Redis with Teleport Database Access? Generate certificates with tctl auth sign using the redis format, host, output path, and TTL flags, which produces a CA file, a private key, and a certificate. Then reference these files in redis.conf using tls-port, tls-ca-cert-file, tls-cert-file, and tls-key-file directives, restrict tls-protocols to TLSv1.2 and TLSv1.3, and restart the Redis server. _daily.dev surfaces practical security walkthroughs for teams hardening database access with mutual TLS._ ### How do I create a dedicated Redis user with ACLs instead of using the default user? Disable the default Redis user and define a new user in the ACL file with a SHA256-hashed password rather than plaintext. Generate a strong password with openssl rand -hex 32, hash it with sha256sum, and add a line like 'user sre-team on # allcommands allkeys' to /etc/users.acl, referenced via the aclfile directive in redis.conf. ACLs require Redis 6 or later. _daily.dev helps engineers track best practices for locking down database users and credentials._ ### Why do I get a NOAUTH Authentication required error when connecting to Redis after disabling the default user? This error appears because the default Redis user has been turned off, so unauthenticated connections are rejected until a valid user authenticates. Run AUTH followed by the username and password of the dedicated user created in the ACL file, for example 'AUTH sre-team ', to authenticate the session before issuing commands like PING or INFO. _daily.dev keeps developers current on database authentication gotchas before they hit production._ ## Similar posts on daily.dev - [How To Install and Secure Redis on Ubuntu](https://daily.dev/posts/how-to-install-and-secure-redis-on-ubuntu-syfjke74v) · DigitalOcean Community · 0 upvotes · 0 comments - [How To Install and Secure Redis on CentOS](https://daily.dev/posts/how-to-install-and-secure-redis-on-centos-jsnqcp6at) · DigitalOcean Community · 0 upvotes · 0 comments - [Connect to a Managed Redis Instance over TLS with Stunnel and redis-cli](https://daily.dev/posts/connect-to-a-managed-redis-instance-over-tls-with-stunnel-and-redis-cli-xsedj7sxl) · DigitalOcean Community · 0 upvotes · 0 comments --- Tags: [#authentication](https://daily.dev/tags/authentication), [#redis](https://daily.dev/tags/redis) [View this post on daily.dev](https://daily.dev/posts/secure-redis-authentication-using-teleport-database-access-8t4etbndt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Secure Redis Authentication Using Teleport Database Access","url":"https://daily.dev/posts/secure-redis-authentication-using-teleport-database-access-8t4etbndt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/secure-redis-authentication-using-teleport-database-access-8t4etbndt"},"datePublished":"2026-08-23T12:22:50.959Z","dateModified":"2026-08-23T12:51:40.737Z","description":"A step-by-step guide covers securing a Redis instance using Teleport Database Access, including blocking public internet exposure, creating a dedicated Redis...","image":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","thumbnailUrl":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/secure-redis-authentication-using-teleport-database-access-8t4etbndt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"authentication,redis","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Secure Redis Authentication Using Teleport Database Access"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/secure-redis-authentication-using-teleport-database-access-8t4etbndt#faq","mainEntity":[{"@type":"Question","name":"How do I set up mutual TLS authentication for Redis with Teleport Database Access?","acceptedAnswer":{"@type":"Answer","text":"Generate certificates with tctl auth sign using the redis format, host, output path, and TTL flags, which produces a CA file, a private key, and a certificate. Then reference these files in redis.conf using tls-port, tls-ca-cert-file, tls-cert-file, and tls-key-file directives, restrict tls-protocols to TLSv1.2 and TLSv1.3, and restart the Redis server. daily.dev surfaces practical security walkthroughs for teams hardening database access with mutual TLS."}},{"@type":"Question","name":"How do I create a dedicated Redis user with ACLs instead of using the default user?","acceptedAnswer":{"@type":"Answer","text":"Disable the default Redis user and define a new user in the ACL file with a SHA256-hashed password rather than plaintext. Generate a strong password with openssl rand -hex 32, hash it with sha256sum, and add a line like 'user sre-team on # allcommands allkeys' to /etc/users.acl, referenced via the aclfile directive in redis.conf. ACLs require Redis 6 or later. daily.dev helps engineers track best practices for locking down database users and credentials."}},{"@type":"Question","name":"Why do I get a NOAUTH Authentication required error when connecting to Redis after disabling the default user?","acceptedAnswer":{"@type":"Answer","text":"This error appears because the default Redis user has been turned off, so unauthenticated connections are rejected until a valid user authenticates. Run AUTH followed by the username and password of the dedicated user created in the ACL file, for example 'AUTH sre-team ', to authenticate the session before issuing commands like PING or INFO. daily.dev keeps developers current on database authentication gotchas before they hit production."}}]} ```