# Update Your Snowflake Connection in integrator.io Before MFA Deprecation

**URL:** <https://connective.celigo.com/t/update-your-snowflake-connection-in-integrator-io-before-mfa-deprecation/3560>\
**Category:** Announcements\
**Tags:** deprecation-notice\
**Created:** [February 27, 2025, 7:32pm UTC](https://connective.celigo.com/t/update-your-snowflake-connection-in-integrator-io-before-mfa-deprecation/3560 "2025-02-27T19:32:39Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tylerlamparter](https://sea1.discourse-cdn.com/flex001/user_avatar/connective.celigo.com/tylerlamparter/32/9204_2.png) [@tylerlamparter](https://connective.celigo.com/u/tylerlamparter)\
**Post date:** [February 27, 2025, 7:32pm UTC](https://connective.celigo.com/t/update-your-snowflake-connection-in-integrator-io-before-mfa-deprecation/3560/1 "2025-02-27T19:32:39Z")

</div>

Snowflake has announced that **single-factor password authentication** will soon be deprecated. To ensure uninterrupted access and enhanced security, we recommend updating your Snowflake connections to use **key pair authentication** instead of username/password authentication.

## **What’s Changing?**

Starting **April 2025** and ending **November 2025** , Snowflake will block single-factor authentication using only a username and password. **Depending on your account setup** , this change may take effect at different times within this period. If your integrations or scripts rely on this method, they will stop working unless updated.

## **How to Migrate to Key Pair Authentication**

Follow these steps to transition from username/password authentication to **username/key pair authentication** :

### **1. Generate an RSA Key Pair**

You’ll need to create a public/private key pair:

- **Windows** : Download OpenSSL from [Win32 OpenSSL](https://slproweb.com/products/Win32OpenSSL.html).
- **Mac/Linux** : Open a terminal and run:

```auto
openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8 -nocrypt
openssl rsa -in rsa_key.p8 -pubout -out rsa_key.pub

```

### **2. Assign the Public Key to a Snowflake User**

Run the following query in Snowflake to create a user with key pair authentication ( **making sure to only copy what's between `-----BEGIN PUBLIC KEY-----` and `-----END PUBLIC KEY-----`** ):

```sql
create user CELIGO_IO_NEW 
    default_warehouse = 'DEMO_WH'
    login_name = 'CELIGO_IO_NEW'
    display_name = 'CELIGO_IO_NEW'
    default_role = 'SYSADMIN'
    type = 'SERVICE' 
    rsa_public_key = '<INSERT_PUBLIC_KEY_HERE>'
;

```

Replace `<INSERT_PUBLIC_KEY_HERE>` with the contents of your `rsa_key.pub` file.

### **3. Update Your Connection in [Integrator.io](http://Integrator.io)**

- Go to **Connections** in Celigo’s **[integrator.io](http://integrator.io)**.
- Edit your Snowflake connection.
- Switch authentication type to **Key Pair Authentication**.
- Upload the **private key** (`rsa_key.pem`).
  - **Making sure to copy the entire private key, including the `-----BEGIN PRIVATE KEY-----` and `-----END PRIVATE KEY-----`**

- Save and test the connection.

## **Additional Resources**

For more details, refer to the official Snowflake documentation:

- [Snowflake Blog: Blocking Single-Factor Password Authentication](https://www.snowflake.com/en/blog/blocking-single-factor-password-authentification/)
- [Snowflake Key Pair Authentication Guide](https://docs.snowflake.com/en/user-guide/key-pair-auth)

Check out the video below for a step-by-step walkthrough of the migration process! 🎥

[![](https://us1.discourse-cdn.com/flex001/uploads/celigo/original/2X/b/b6d9871282a4d285c8d67f8389bba7a82b730ba9.jpeg "🚨 Snowflake MFA Deprecation: Update Your Celigo integrator.io Connection") ](https://www.youtube.com/watch?v=W6HRPdN5X4g)

If you have any questions, drop a comment below!