PostgreSQL credentials: users, passwords and connection strings
What each part of a database connection string means, why an application should not use the superuser, and how Voroa presents your database credentials.
What this covers
A PostgreSQL connection string packs five things into one line: the user, the password, the host, the port and the database name. The part worth thinking about is the user. A database is created with a superuser that can do anything, including dropping the whole database, and using that account for your application means any bug or injection has the maximum possible blast radius. The safer pattern is a second login with only the rights your application actually needs, kept separate from the account you use for administration.
Creating additional database logins with their own passwords is not available on Voroa today. Your database’s current connection details are shown in the dashboard, and are covered by the guides below.