- Security >
- Authentication >
- Authentication Mechanisms >
- MONGODB-CR
MONGODB-CR¶
On this page
MONGODB-CR is a challenge-response mechanism that authenticates users through passwords. MONGODB-CR verifies supplied user credentials against the user’s name, password and authentication database. The authentication database is the database where the user was created, and the user’s database and the user’s name together serve to identify the user.
MONGODB-CR and SCRAM-SHA-1¶
Changed in version 3.0.
MongoDB no longer defaults to MONGODB-CR and instead uses SCRAM-SHA-1 as the default authentication mechanism.
Even when using the MONGODB-CR authentication mechanism, clients and drivers that support MongoDB 3.0 features (see Driver Compatibility Changes) will use the SCRAM communication protocol. That is, MONGODB-CR authentication mechanism also implies SCRAM-SHA-1.