CockroachDB 26.1 release

Going Deep on Security and Compliance for our Most Demanding Customers

In this latest release we’re going deep on security and compliance for our most demanding customers. There’s a new CMEK UI to simplify encryption key management. Organizations using CockroachDB Cloud Advanced on Azure are now HIPAA and PCI/DSS compliant and we’ve added support for FIPS 140-3.

Enhanced security

Multiple updates have been made across CockroachDB to improve security.

New CMEK UI

With an enhanced unified Customer-Managed Encryption Keys (CMEK) management user interface, database administrators can streamline key management experiences and minimize operational complexity across the different cloud providers. The unified CMEK UI simplifies encryption key management for cloud databases, reducing operational overhead. It also improves usability by making it easier to enable CMEK, monitor encryption status, and audit compliance.

Learn more

Ability to disable the root SQL user

Our users migrating off of Oracle must maintain compliance with critical customer requirements. With CockroachDB v26.1 you can disable the root SQL user to match Oracle Data Vault functionality, providing administrators a similar level of restricted access for privileged users as they have with Oracle Data Vault.

Learn more

Improved authentication and authorization with OIDC support

Integrating OpenID Connect (OIDC) authentication and authorization with CockroachDB provides us a number of benefits:

Seamless security

By leveraging OIDC as the source of truth for authentication and authorization, we ensure that user credentials and access controls are managed consistently and securely within a customer’s existing security infrastructure.

Learn more

Simplified user management

Centralized user management through OIDC reduces administrative overhead by allowing IT teams to manage users and their permissions in a single system. Additionally, this integration enables seamless incorporation of CockroachDB into the existing IT ecosystem, ensuring that database access aligns with established security protocols and policies.

Learn more

Improved compliance

Utilizing OIDC for authentication and authorization helps organizations adhere to internal policies by providing a unified and auditable approach to access management.

Learn more

Deeper compliance support

We’re investing in compliance to make it easier for regulated organizations to adopt CockroachDB.

HIPAA & PCI/DSS Compliance

With expanded HIPAA and PCI/DSS compliance participation, organizations using CockroachDB Cloud Advanced on Azure now operate a HIPAA- and PCI-compliant database environment. This deeper Azure integration makes certification for compliance-centered applications easier.

Learn more

Native FIPS 140-3 Support

FIPS 140-3 has been implemented using Go 1.24’s native support. This approach eliminates the performance overhead previously caused by delegating operations to external OpenSSL libraries and positions the platform to meet September 2026 compliance mandates early.

Learn more

Get started with CockroachDB

Spin up your first cluster today or speak with an expert.