pgAdmin 4

pgAdmin 4 at a glance

pgAdmin is the most widely used open-source administration and development tool for PostgreSQL, available as a desktop app and a web application. pgAdmin ships regular releases plus security fixes; as a tool with direct database access — and in web mode, an internet-facing surface — keeping it current and protected matters.

For admins the web deployment is the security-relevant mode: it holds database credentials and full access, so never expose it openly on the internet — put it behind authentication and, ideally, VPN or a bastion, and keep it current, since it receives security advisories. The underlying Python/runtime should stay supported. In desktop mode, protect the saved connection passwords. Because it has full database privileges, a compromise is severe. After updating, verify login and core operations. Consider whether a locked-down desktop install over an SSH tunnel reduces the exposed surface. Patchletter surfaces new pgAdmin releases so security fixes land.