docs/content/v2.20/secure/enable-authentication/_index.md
Enabling user authentication in YSQL and YCQL requires setting the appropriate flags on server startup:
--ysql_enable_auth=true in YSQL--use_cassandra_authentication=true in YCQLIn YSQL, further fine-grained control over client authentication is provided by setting the --ysql_hba_conf_csv flag. You can define rules for access to localhost and remote clients based on IP addresses, authentication methods, and use of TLS (aka SSL) certificates.
<div class="title">Enable user authentication</div>
</div>
<div class="body">
Enable authentication and configure user authorization in YugabyteDB.
</div>
</a>
<div class="title">Create login profiles</div>
</div>
<div class="body">
Prevent brute force exploits by enabling login profiles in YSQL.
</div>
</a>
<div class="title">Configure client authentication</div>
</div>
<div class="body">
Use the ysql_hba_conf_csv flag to configure client authentication in YSQL.
</div>
</a>