Is the SA password still hard coded on SQL Server 2019 ?

Question

Is the SA password still hard coded on SQL Server 2019 ?

Goris, Gerrit 20

During an external Cyber Security Audit , it was found by the auditors that the SA account (SQL Server system administrator ) password was hard-coded and could be accessed by unauthorized individuals. Today we use version SQL server 2019, I would like to know if the SA password is still hard-coded ?

We use Mixed Mode (SQL Server authentication and Windows authentication ) .

All info about protection of the SA password is welcome.

Accepted answer

1 additional answer

Your answer

Answer 1

hello there,

I wish i had another another for this

In my knowledge cutoff in September 2021, the SA (System Administrator) password is not hard-coded in SQL Server 2019 or any recent versions. When you install SQL Server, you are prompted to set a password for the SA account. It is crucial to choose a strong and secure password to protect your database.

However, it's worth noting that the SA account is a powerful administrative account with extensive privileges. It is recommended to follow security best practices to safeguard your SQL Server installation, such as:

Use a complex and unique password for the SA account.

Limit the number of people who have access to the SA account.

Regularly review and audit the privileges granted to the SA account.

And see if it helps,

Thank you

--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

Olaf Helper 47,441

by the auditors that the SA account (SQL Server system administrator ) password was hard-coded

The password for the SysAdmin account "sa" is and never was hard-coded, you assign the password during installation.

Goris, Gerrit 20 Reputation points

2023-06-29T11:36:40.3966667+00:00

Thanks for your answer, indeed SA password is not hard coded in SQL, but we found that the password from the SA account was stored in plain text in the application itself which was found by the Audit Team. We are working on a solution to get this security risk solved.

Share via

Is the SA password still hard coded on SQL Server 2019 ?

1 additional answer

Your answer