credcheck v4.7 has been released

Antananarivo, Madagascar - April 19, 2026

## PostgreSQL credcheck extension

The credcheck PostgreSQL extension provides few general credential checks, which will be evaluated during the user creation, during the password change and user renaming. By using this extension, we can define a set of rules:

* allow a specific set of credentials
* reject a certain type of credentials
* deny password that can be easily cracked
* enforce use of an expiration date with a minimum of day for a password
* define a password reuse policy
* define the number of authentication failure allowed before a user is banned
* define a delay on authentication failures
* force users to change their password after first login
* throw a warning N days before when the password user is about to expire

This release fixes issues reported by users since last release and adds
two new features.

- Allow no password policy checks at all for changes done by a superuser
enabling new GUC `credcheck.superuser_nocheck`.
- Add feature "Disallow password change" to disallow users to change
their password. This behavior is enabled by enabling new GUC
`credcheck.disallow_password_change`. It returns the following message
when a user tries to change its password:
`ERROR: you are not allowed to change your password.`
- Fix `credcheck.password_valid_until` when CREATE/ALTER ROLE is called from a plpgsql block.
- Fix password_valid_until / password_valid_max behavior.

Upgrade require a PostgreSQL restart to reload the credcheck library.

Complete list of changes and acknowledgements are available [here](https://github.com/HexaCluster/credcheck/releases/tag/v4.7)

## Links & Credits

credcheck is an open project under the PostgreSQL license maintained by [HexaCluster](https://github.com/HexaCluster/credcheck/).
Any contribution to build a better tool is welcome. You can send your ideas, features requests or patches
using the GitHub tools.

**Links :**

* Download: [https://github.com/HexaCluster/credcheck/releases/](https://github.com/HexaCluster/credcheck/releases/)
* Support: use GitHub report tool at [https://github.com/HexaCluster/credcheck/issues](https://github.com/HexaCluster/credcheck/issues)

## About credcheck

The credcheck extension is developed and maintained by Gilles Darold at [https://hexacluster.ai](HexaCluster Corp). If you need more information please [https://hexacluster.ai/contact-us/](contact us).

Documentation at [https://github.com/HexaCluster/credcheck#readme](https://github.com/HexaCluster/credcheck#readme)