Configuring Username and Password Authentication on Mosquitto MQTT Broker

Using Username and Password Authentication is a good and effective way of restricting access to your MQTT server.

We look at creating the password file using the mosquitto_passwd utility and how to use the default password file that comes with the Installation.

We also look at reloading the password file without restarting the broker using the HUP signal (Linux only).

We also look at how the allow anonymous setting affects the connection.
On the client side we configure a Python client to connect using valid and invalid passwords and examine the connection messages received from the broker.

Tutorial on site

Related videos
Using the mosquitto_pub and mosquitto_sub client tools
-----------
Configuring SSL on the Mosquitto MQTT Broker
----------------
Using Websockets Over SSL with Mosquitto
Have a question Use the comments or if you want help then use
If you find these videos useful then you might want to consider buying me a coffee

[DeepankarMaithani]

Hi Steve. Thanks for the nice tutorial. It helped me understand few things better. I would like to add a little more info for your viewers. You are using ps -a to get the process id and then kill the process to make the changes take effect after you edit the configuration. There is a another better way.
1. Make changes to the mosquitto.conf.
2. sudo systemctl stop mosquitto.service
3. Sudo systemctl daemon-reload
4. sudo systemctl start mosquitto.service. May be you can add this way of doing it to your blog. Thanks

[omidaghakhani]

Hey Can i add user dyanamic?
And i understand that i can set read/write for topic, how?
Thanks

[ibiokekom]

Any solution to this please ?]
unable to load server key file check file

[mayer]

Is it possible to send/receive password protected msgs on esp32?

[raghu_rammohan]

Hi, Thanks for a descriptive video. When I enable the configurations in the default mosquitto.conf file, I'm able to connect to the broker with our or without credentials too. If I maintain it in separate conf file, then the authorization part works. Am I missing something?

[ThePakcikjack]

hi steve, when i try to encrypt the password file like u did on minute 2:38 igot this error
C:\Program Files -U mosquitto1.txt
Error creating backup password file "mosquitto1.txt.tmp", not continuing.
i hope u can help me. thanks in advance.

[iqballuqmanparis]

Hi Steve, I’m having trouble of open up my mosquitto.conf at my raspberry.It always mentioned permission denied.Could you assist me regarding this problem.Im trying to install the key and ca on my raspberry.Thank you

[piovewiraguna]

hai steve i found eror like this 1525918561: mosquitto version 1.4.14 (build date 11/07/2017 0:03:18.53) starting
1525918561: Config loaded from pass.conf.
1525918561: Opening ipv6 listen socket on port 1883.
1525918561: Error: Only one usage of each socket address (protocol/network address/port) is normally

how i can fix this?

[roberthix]

Hey Steve, I saw your transport encryption tutorial, but wonder how something like that work with the password since the broker is handling the authentication, not the receiving client? Can you point me to anything for that?

[tannercraig]

Hi Steve, Coworker and I are trying to work through setting this up. I am getting "Error: Unable to open configuration file." when I attempt to disallow anonymous. The .conf file is still the default name. Is this something simple like a folder permissions setting or something different?

[anishchristopius]

At 6:49 how do u stop the running mosquitto service in cmd ? Like what shortcut do u use ? Thanks

[am]

Hi Steve, how to convert the text file to password file. regards

[haarishk]

Error: Unknown option '-t/sensor1'.
WHAT TO

[lattelover]

Hi Steve, thanks for the tutorial. I have a question, if i have 50 devices connected to a Broker, do i have to create 50 users, or just register 1 user with password and used together? It's quite tedious to register auth one by one and manage the password changes in other time.
Is there any way easier?

[michaels]

Thanks for the tutorials steve. If I want to encrypt the password sent to the broker can I use payload encryption to avoid using keys? If so can you point me to the topics I need to know to do this?

[chriskindig]

Hi Steve, have you thought of doing a tutorial on installing mosquitto to a privet home sever, like freenas I have looked all over and the info is very vague at best. Regards Chris.