How do I secure port 5432 on my server?

Configure pg_hba.conf to only accept connections from trusted internal IP subnets, require password hashing (scram-sha-256), and enforce SSL connections.

Can I connect remotely to PostgreSQL without opening port 5432 to the world?

Yes. Use an SSH tunnel ('ssh -L 5432:localhost:5432 user@server') or an encrypted WireGuard/OpenVPN tunnel to access PostgreSQL securely.

How do I check if my PostgreSQL port is reachable?

Test your host with our Open Port Checker tool or execute 'pg_isready -h -p 5432' from your command line.

Home/Open Port Checker/Port 5432

Port 3389 Port 6379

Registered Port Reference

Port 5432: PostgreSQL (TCP)

Object-relational database listener for PostgreSQL enterprise database systems.

Port Number

5432

Transport

TCP

Security Risk

Critical

Standard / RFC

PostgreSQL Protocol

Test Port 5432 Reachability Live

Verify whether Port 5432 is open, closed, or filtered on your server or public IP address.

Loading port checker...

Service Architecture & Function

Port 5432 is the default port for the PostgreSQL open-source object-relational database system. Applications, ORMs, and admin tools like pgAdmin communicate across port 5432 to manage schema, tables, and complex queries.

Security Profile & Hardening

Never expose port 5432 directly to 0.0.0.0/0 on the public internet. Restrict listening interfaces in pg_hba.conf and enforce TLS encryption for all inter-service database traffic.

Example Firewall Commands:

# UFW (Ubuntu/Debian)

sudo ufw allow from 10.0.0.0/8 to any port 5432 proto tcp

# iptables (Direct Kernel)

iptables -A INPUT -p tcp -s 10.0.0.0/8 --dport 5432 -j ACCEPT