Skip to content
Clodo
Intermediate7 minUpdated: 2026-09-13

MongoDB 7: Authentication, Connection Strings, and mongodump Backups

Enable authentication on your MongoDB service, create an application user, build the right connection string, and set up regular backups.

Verified against

MongoDB
7.0
Shell
mongosh 2.x
Last checked
2026-09-13

Before you start

  • A MongoDB service created in the panel
  • The service IP and port
  • mongosh or MongoDB Compass on your local machine
On This Page
All Guides
Reading progress

MongoDB's most dangerous default is that authentication can be off. An internet-facing MongoDB with no password is found by scanning bots within minutes; this has been one of the most common data-breach scenarios for years. So the first thing to do is create an admin user and require authentication.

Turning on authentication#

mongosh
// admin veritabanina gec
use admin

// Yonetici kullanicisi
db.createUser({
  user: "yonetici",
  pwd: passwordPrompt(),
  roles: [{ role: "root", db: "admin" }]
})

// Uygulama icin ayri kullanici: yalnizca kendi veritabaninda yetkili
use uygulama_db
db.createUser({
  user: "uygulama",
  pwd: passwordPrompt(),
  roles: [{ role: "readWrite", db: "uygulama_db" }]
})

Building the right connection string#

Bağlantı dizesi
# authSource, kullanicinin TANIMLANDIGI veritabanidir;
# baglanacaginiz veritabani ile ayni olmak zorunda degil.
mongodb://uygulama:[email protected]:27017/uygulama_db?authSource=uygulama_db

# Yonetici kullanicisiyla baglanirken:
mongodb://yonetici:[email protected]:27017/?authSource=admin

Backing up with mongodump#

Yerel terminal
mongodump \
  --uri="mongodb://uygulama:[email protected]:27017/uygulama_db?authSource=uygulama_db" \
  --gzip --archive=yedek_$(date +%F).gz

Troubleshooting

Symptom

Authentication failed

Cause

authSource is missing, or the user was created in a different database.

Fix

Append ?authSource=<db where the user was created> to the connection string.

Symptom

Server starts but I cannot connect remotely

Cause

bindIp is set to 127.0.0.1 only.

Fix

Set bindIp to 0.0.0.0 in the service configuration and make sure authentication is enabled.

Was this guide helpful?

Feedback goes straight to the team that maintains this guide.

Related Guides

MySQL Remote Connection Access and Automated Backups

Guide to enabling remote access on MySQL, configuring user grants, and setting up automated mysqldump backups.

Redis Installation, Memory Constraints, and Password Authentication

Configure in-memory Redis key-value store, tune maxmemory eviction policies, and mandate requirepass authentication.