Eight authentication methods, TLS and SSH, and a block that lives at the driver.

This app holds credentials for your production databases. What it does with them, and what it stops you doing by accident, is worth reading before you install it.

The connection dialog on its General tab, with a pasted connection string and the Security and Advanced tabs beside it — Fig 01 Connections · Paste a connection string, and the rest is behind two tabs

What it does

8 authentication methods: no auth, username and password, SCRAM-SHA-1 and SCRAM-SHA-256 free, plus X.509, LDAP, Kerberos and AWS IAM on Pro
TLS with a custom CA certificate, and SSH tunnelling with a password or a private key
Stored secrets are encrypted on the device that saved them. Save password can be turned off entirely, and then nothing is written to disk
Write protection covers inserts, updates, deletes, bulk writes, drops, renames, index changes and aggregation output stages, over a whole connection or named databases and collections
The confirmation is raised by reading your query, but the block is enforced at the driver, so a destructive call the text cannot show is still refused

The connection dialog on its Security tab, with the SSH tunnel enabled and its host, port, user and key file filled in — Fig 02 Connections · The tunnel form, on the Security tab

The delete-collection confirmation on a write-protected target, opening with the sentence that names the connection and the collection the protection covers, and a red Confirm button — Fig 03 Write protection · The confirmation names what is protected before it asks

Try it against your own data

38 MB installer. Free forever, and a 14-day Pro trial with no card.

Download Monghoul