The End of Password-Only Logins in Snowflake: What Changes, When, and How to Migrate Safely Snowflake is done playing nice with single-factor passwords. If you still have: humans logging in with …

Snowflake Community is a platform for users of the Snowflake cloud data platform to share knowledge, ask questions, and collaborate. Readers can learn about cloud data warehousing, data analytics, and data engineering best practices. With forums, user groups, and community events, Snowflake Community provides resources for Snowflake users to connect and learn from each other.

Snowflake Community

Snowflake is phasing out password-only logins across three enforcement stages between September 2025 and October 2026. Human users will be required to use MFA when authenticating with passwords, while service accounts must migrate away from passwords entirely to key-pair authentication or OAuth. The newly released Strong Authentication Hub (preview as of Feb 14, 2026) inside Trust Center provides a remediation dashboard that identifies at-risk users, groups them by issue type (e.g., active Power BI password usage, stale accounts), and guides step-by-step migration. The article outlines practical migration tracks for both human users (prefer SSO, enforce MFA, use authentication policies) and service users (migrate LEGACY_SERVICE to SERVICE type using key-pair or OAuth), along with required roles and a phased rollout timeline.

The End of Password-Only Logins in Snowflake: What Changes, When, and How to Migrate Safely

Track A — Human users (TYPE=PERSON / NULL)

Track B — Service users (TYPE=LEGACY_SERVICE → TYPE=SERVICE)