MS SQL Audit / Query Logging

Question

Does MSSQL Server 2016 audit logging stores password in clear when I have enter an SQL query that is with the secret/password? Kindly advise.

An example of the sql query:

Create credential XYZuser with identity=’abcdefgh’, secret=’password’

After I run the query, is the secret/password stored in clear in the logs?

Thanks & Regards

Answer 1

Hi @HY ,
Please don’t worry about that. SQL Server audit log will not record password clearly.
Please see this example:

Best Regards,
Amelia

---

If the answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

No, it doesn't expose passwords in traces or audits. Below is an example from a server audit, where I created a credential:

SECRET = N'******'

As you see, it show a number of asterisks instead of the passwords.

Answer 3

Thanks All for the answers.