← Cybersecurity Alphabet Soup

SCRAM

Salted Challenge Response Authentication Mechanism

protocolshard

SCRAM is a modern password authentication mechanism where the server stores only salted, iterated hashes and the password never travels in usable form. Both sides prove knowledge of the credential through a challenge-response exchange, and mutual authentication detects fake servers. It is used in PostgreSQL, MongoDB, and many SASL-enabled services.

Sources

More in protocols