Bug reference: 16451 Logged by: yi Ding Email address: abcxiaod@126.com PostgreSQL version: 10.12 Operating system: linux Description:
bash-4.2# cat /home/postgres/.psql_history |grep password alter user t password 'adsf123asg';
Yes, if you intentionally send the query in clear text, it will be logged in clear text.
Just like with your report about creating user, it is clearly documented in the ALTER ROLE documentation that if you don't want this, you should use \password or a similar functionality, and not the cleartext ALTER USER.
You can also turn off command line history in psql if you want, by running it with -n.
