> For the complete documentation index, see [llms.txt](https://docs.enclaive.cloud/vault/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enclaive.cloud/vault/tutorials/ui/authentication/username-password.md).

# Username/Password

{% hint style="info" %}
This step assumes you started the Vault server and signed in with the root token in the Web UI step.
{% endhint %}

### Enable authentication <a href="#enable-authentication" id="enable-authentication"></a>

1. Select the **Access** view from the menu

<figure><img src="/files/ebBEKfjof2Zlmx2ww05r" alt=""><figcaption></figcaption></figure>

This view is the index and displays all authentication methods, entities, groups, and leases. The token authentication method was enabled when Vault was initialized and cannot be disabled.

2. Select the **Enable new method** action from within the view.

<figure><img src="/files/aM6OumAs0jyZa4KlXpDN" alt=""><figcaption></figcaption></figure>

This view displays all of the authentication methods that this version of Vault supports.

3. Choose the **Username & Password** method and select **Next**.

<figure><img src="/files/yaf8CzJAsYfX8PlguZgd" alt=""><figcaption></figcaption></figure>

This view displays the path and the ability to configure the auth method. The path defaults to "userpass."

{% hint style="warning" %}
***User lockout***

&#x20;the User lockout feature is enabled by default for the `userpass`, `approle`, and `ldap` auth methods.
{% endhint %}

4. Toggle **Method Options** to display the method options interface.

<figure><img src="/files/DzKJZIKWyWRFqyTvuWyx" alt=""><figcaption></figcaption></figure>

5. Check the **List method when unauthenticated** option.
6. Select **Enable Method**.

The authentication method is created. The view displays its configuration page.

<figure><img src="/files/mxxYUmatzpZvqmbdFbqE" alt=""><figcaption></figcaption></figure>

### Create credentials <a href="#create-credentials" id="create-credentials"></a>

The User & Password authentication method, abbreviated as userpass, enables the creation of credentials for individual users.

1. Select the **View method** action from within the view.

<figure><img src="/files/tSaXlpkFU8BnWvMCAzL2" alt=""><figcaption></figcaption></figure>

This view displays the users created for this authentication methods. There are no users.

2. Select the **Create user** action from within the view.

This view displays the ability to create a custom login for a user.

3. Enter `webapp` in the **Username** field. Enter `password` in the **Password** field.

<figure><img src="/files/viS2UjRhwamVzi7AK3MU" alt=""><figcaption></figcaption></figure>

4. Toggle **Tokens** to display the token interface.

<figure><img src="/files/UFQLe6Cp2v9ICiQ9l9Nl" alt=""><figcaption></figcaption></figure>

5. Enter `webapp` in the **Generated Token's Policies**. Select **Add**.

<figure><img src="/files/llDfi35T58qqpmtg18nd" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
The policies added to this authentication method are not checked against available policies.
{% endhint %}

6. Select **Save**.

The authentication method for this user is created.

### Authenticate with credentials <a href="#authenticate-with-credentials" id="authenticate-with-credentials"></a>

You are currently logged in with the root token. To login with these user credentials requires you to log out.

1. Open the **Profile** submenu. Select **Sign Out**.

<figure><img src="/files/LjLFNAx4w9H3hKoAcM6r" alt=""><figcaption></figcaption></figure>

You are now logged out of the server.

2. Choose **userpass** from the **Method** list.

<figure><img src="/files/oLIOtb2FCyMKoy7uCl8j" alt=""><figcaption></figcaption></figure>

The view changes to show a username and password login interface.

3. Enter `webapp` in the **Username** field. Enter `password` in the **Password** field. Select **Sign in**.

You are now logged through the userpass authentication method. The capabilities of this user are limited to the policies assigned to this user's auth method.