How to Embed Password in Tableau

Embedding a password in Tableau is the key to automating your data refreshes and providing a seamless viewing experience for your audience. If you've ever been frustrated by manual refresh prompts or convoluted login processes for your users, you're in the right place. This guide will walk you through exactly how to embed credentials when you publish a data source or workbook, along with the best practices to keep your data secure.

Graphed

Your AI Data Analyst to Create Live Dashboards

Connect your data sources and let AI build beautiful, real-time dashboards for you in seconds.

Build Your First Dashboard

Why Embed Passwords in Tableau?

While Tableau's default is to prompt users for credentials, embedding them directly into a workbook or data source connection offers a few significant advantages. This isn’t about being lazy, it’s about making your analytics more efficient and accessible.

• Automated Freshness: The number one reason to embed credentials is for scheduled data extract refreshes on Tableau Server or Tableau Cloud. For a refresh to run automatically overnight or on a schedule, Tableau needs a way to log into the source database without manual input. Embedded credentials provide that access.
• Simplified User Experience: When you embed a password, dashboard viewers don’t need their own logins for the underlying database. They can open the dashboard and see the data immediately. This removes a major barrier, especially for non-technical stakeholders who just need the final insights.
• Fewer Login Prompts: It streamlines the development and viewing process by eliminating repetitive requests to enter a username and password every time the data connection is activated.

However, this method isn't a one-size-fits-all solution. If your data requires granular, row-level security based on the individual user logging in, prompting for credentials or using user-based filtering is the better approach. But for most standard reporting where the audience has permission to see all the data presented, embedding is the way to go.

Step-by-Step: How to Embed a Password When Publishing

The most common and straightforward time to embed credentials is during the publishing process from Tableau Desktop. This ensures your dashboard or data source is properly configured from the moment it lands on your server.

AI for Data Analysis

Crash Course

Graphed

Free PDF Guide

AI for Data Analysis Crash Course

Learn how to get AI to do data analysis for you — the best tools, prompts, and workflows to go from raw data to insights without writing a single line of code.

Download Free Guide

Publishing a New Workbook or Data Source

Follow these steps to embed credentials for content you're publishing for the first time.

Step 1: Connect to Your Data In Tableau Desktop, connect to your database (like SQL Server, PostgreSQL, Redshift, etc.) as you normally would. You will need to enter the server details, username, and password to establish the initial connection.

Step 2: Build Your View Create your worksheet, dashboard, or simply prepare your data source with the relationships and calculations you need.

Step 3: Begin the Publishing Process Once you're ready, navigate to the top menu and select Server > Publish Workbook... or Server > Publish Data Source... after signing in to your Tableau Server or Tableau Cloud account.

Step 4: Configure the Authentication Settings This is the most important step. In the publishing dialog box that appears, look for the Data Sources section. Beside your listed data source, click the Edit link.

A small window will pop up with authentication options. By default, it's often set to Prompt user for username and password.

Click the dropdown menu and select Embedded password.

Tableau will ask you to re-enter the password to confirm. This ensures you've entered it correctly and are intentionally using embedded credentials.

Step 5: Finalize and Publish With your authentication method set to Embedded password, you're all set. Configure any other publishing options as needed, then click the blue Publish button. Your content is now live, and Tableau Server will use the saved credentials for any scheduled refreshes or live connections.

Managing Credentials for Already Published Content

What if you already published a workbook and forgot to embed the password? Or maybe you need to update it after a credential change. You can easily manage this directly on Tableau Server or Tableau Cloud without republishing.

1. Log into your Tableau Server or Cloud site.
2. Navigate to the workbook or data source you want to edit.
3. Click the Data Sources tab.
4. Check the box next to the data source whose connection you want to edit, then click the Actions menu and select Edit Connection.
5. In the Edit Connection dialog, click the box under Authentication and select Embedded password (or update the password if it's already selected).
6. Enter the username and password for the account and click Save.

Now, any associated workbooks and scheduled refreshes for that data source will use the newly embedded credentials.

Security Best Practices You Should Always Follow

Embedding passwords is convenient, but it requires a responsible security mindset. Handing over the keys to your database is serious business. Here’s how to do it safely.

Graphed

Your AI Data Analyst to Create Live Dashboards

Connect your data sources and let AI build beautiful, real-time dashboards for you in seconds.

Build Your First Dashboard

1. Use a Dedicated Service Account

This is the most critical rule. Never, ever embed your personal database credentials. Instead, work with your database administrator to create a dedicated service account specifically for Tableau.

• Principle of Least Privilege: This service account should have read-only permissions and access to only the specific schemas and tables required for your dashboards. Nothing more. It should not have any administrative or write permissions.
• Clear Accountability: If an issue arises, you'll know it's tied to the Tableau service account, making troubleshooting much easier.
• Avoid Disruption: If you use your personal account and you leave the company or your password expires, all your dashboards and refresh schedules will break. A service account is independent of any single person.

2. Understand How Tableau Secures Credentials

You can rest assured that Tableau isn't storing your password in a plain text file. When you embed credentials, Tableau Server and Tableau Cloud encrypt them at rest. This process protects the information from being easily accessed or read by unauthorized parties who might gain access to the server's backend.

3. Create a Password Rotation Policy

Service account passwords shouldn't live forever. To maintain strong security, this password should be changed on a regular, predictable basis (e.g., every 90, 180, or 365 days). When the password is changed at the database level, remember to update the connection information on Tableau Server using the "Edit Connection" steps described earlier to prevent refresh failures.

4. Manage Publisher Permissions in Tableau

Not everyone in your organization should have the ability to publish dashboards with embedded credentials. Use Tableau's project-level permissions to control who can publish content. Typically, this permission is granted only to a handful of trusted data stewards, developers, or analysts who understand the security implications and company policies.

AI for Data Analysis

Crash Course

Graphed

Free PDF Guide

AI for Data Analysis Crash Course

Learn how to get AI to do data analysis for you — the best tools, prompts, and workflows to go from raw data to insights without writing a single line of code.

Download Free Guide

A Modern Alternative: JDBC Drivers and Personal Access Tokens

For many modern cloud data warehouses like Snowflake, Databricks, and Google BigQuery, traditional username/password authentication is being replaced by more secure methods.

OAuth 2.0: Instead of embedding a password, you will often find an option like "Embed access token" or "Authenticate with OAuth." When you publish a data source connected via this method, Tableau will prompt you to log into your cloud data platform through its own interface. Once you authorize access, the platform gives Tableau a secure token. This token grants access without ever storing your actual username and password, which is a much more secure standard. If you see an OAuth option for your connector, it’s almost always the preferred choice.

Personal Access Tokens (PATs): Platforms like Databricks or Dremio use PATs. You generate a long, random string (a token) from your user profile within the data platform and use that in the "password" field in Tableau. These tokens can often be configured with specific permissions and expiration dates, giving you granular control over access.

Final Thoughts

Embedding passwords in Tableau is fundamental to putting your analytics on autopilot, enabling automated extract refreshes that keep your dashboards fresh and relevant. By choosing the right authentication method during publication and following key security practices like using dedicated read-only service accounts, you can build a reporting environment that is both efficient and secure.

We've focused a lot on making traditional BI tools work smoothly, but the process of building dashboards, managing credentials, and setting up refreshes is still pretty manual. At Graphed, we created a way to skip most of that setup. After securely connecting your data sources with a few clicks, you can use natural language to ask for the exact report or dashboard you need. Our AI-powered analyst handles the rest - building live, interactive visualizations in seconds without you needing to manage individual passwords or complex publishing settings for every view.