> ## Documentation Index
> Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Demo UserPass Auth Method
> This tutorial explains how to enable and use the userpass authentication method in HashiCorp Vault for username/password scenarios.
In this tutorial, you’ll learn how to enable and use the **userpass** authentication method in HashiCorp Vault. This approach is ideal for simple username/password scenarios.
## Prerequisites
* Vault CLI installed and configured
* Vault server unsealed and reachable
* A Vault token with `root` or `sudo` privileges
For more details on installing Vault, see the [Vault Installation Guide](https://www.vaultproject.io/docs/install).
***
## 1. Verify Existing Auth Methods
Before enabling new methods, check which authentication backends are active:
```shell theme={null}
vault auth list
```
Example output:
| Path | Type | Description |
| ------ | ----- | ------------------------------- |
| token/ | token | default token-based credentials |
The `token` method is enabled by default and provides basic token authentication.
***
## 2. Enable the Userpass Auth Method
Activate the `userpass` backend at its default path:
```shell theme={null}
vault auth enable userpass
```
Expected response:
```text theme={null}
Success! Enabled userpass auth method at: userpass/
```
***
## 3. Create Userpass Users
Add individual users under `auth/userpass/users`. Each user can be assigned one or more policies.
| Username | Password | Policies |
| -------- | -------- | -------- |
| frank | vault | bryan |
| jamie | cloud | bryan |
### 3.1 Create User “frank”
```shell theme={null}
vault write auth/userpass/users/frank \
password=vault \
policies=bryan
```
### 3.2 Create User “jamie”
```shell theme={null}
vault write auth/userpass/users/jamie \
password=cloud \
policies=bryan
```
Storing plaintext passwords in scripts can be insecure. Consider using environment variables or a secure secrets store.
***
## 4. List and Inspect User Configurations
### 4.1 List All Users
```shell theme={null}
vault list auth/userpass/users
```
Example output:
```text theme={null}
Keys
----
frank
jamie
```
### 4.2 Read a User’s Settings
Inspect configuration for user `jamie`:
```shell theme={null}
vault read auth/userpass/users/jamie
```
Key settings include token TTLs, policies, and CIDR restrictions.
***
## 5. Authenticate with Userpass
After creating users, log in using the `userpass` method. Each login issues a distinct Vault token.
### 5.1 Login as “jamie”
```shell theme={null}
vault login -method=userpass username=jamie
```
Enter password when prompted:
```text theme={null}
Password (will be hidden): cloud
Success! You are now authenticated.
```
### 5.2 Login as “frank”
```shell theme={null}
vault login -method=userpass username=frank
```
Enter password:
```text theme={null}
Password (will be hidden): vault
Success! You are now authenticated.
```
Each session returns token details:
| Field | Description |
| --------------------- | ------------------------------------- |
| `token` | Your Vault token |
| `token_policies` | Applied policies (`bryan`, `default`) |
| `token_duration` | Token TTL |
| `token_meta_username` | Username metadata |
***
## References
* [Vault Userpass Auth Method](https://www.vaultproject.io/docs/auth/userpass)
* [Vault Authentication Overview](https://www.vaultproject.io/docs/auth)
* [Vault CLI Commands](https://www.vaultproject.io/docs/commands)