Changes / Warehouses & lakehouses / Snowflake
End of supportmedium impact
Snowflake blocks password sign-in for all remaining legacy service users
Non-human users are blocked from password authentication, and existing LEGACY_SERVICE users are migrated to TYPE=SERVICE.
Who’s affected
Any Snowflake account that still has LEGACY_SERVICE users, meaning scripts, ETL/ELT tools, BI connectors, dbt jobs or other non-human logins that sign in with a password. Enforcement rolls out between August and October 2026, and each account is notified of its own date.
Not affected: Accounts with no LEGACY_SERVICE users, and service accounts already on key-pair or OAuth authentication. Human users are also not the target of this change.
What it costs
No price change in the record. The cost is engineering effort to move each non-human integration off passwords, plus outage risk if a password-based job is blocked first.
When to act
Enforcement is already rolling and may hit your account at any time, so inventory and cut over now; dates are account-specific and subject to change, and any extension has to be arranged for your account.
Blast radius: Scheduled loads, dbt profiles, BI extract refreshes, reverse-ETL and custom scripts that use a password will fail to authenticate. Downstream dashboards and models then go stale.
What should you do? decision tree
- you have not yet checked your enforcement dateFind the notice sent to your account admins and confirm whether an extension applies to your account, since extensions are account-specific.
- you do not know which users are LEGACY_SERVICEInventory service users in your account and list the tools, schedulers and scripts behind each one, with their owners.
- A user is already blocked or about to beMove that integration to key-pair or OAuth authentication on a TYPE=SERVICE user and update the client's stored credentials.
- A tool cannot support non-password authAsk the vendor for a supported connector version, or put the job behind a wrapper that handles key-pair auth.
- you cannot finish before your dateRequest an extension from Snowflake and prioritise production pipelines and executive dashboards first.
Options
- WaitIf your account has no LEGACY_SERVICE users or already has a confirmed extension, do nothing now beyond a documented check.
- OptimizeAccept the automatic conversion to TYPE=SERVICE, then update each client that still sends a password so it uses a supported non-password method.
- UpgradeUpgrade old drivers, connectors and ETL tool versions to ones that support key-pair or OAuth authentication.
- Re-architectCentralise service credentials in a secrets manager with key rotation so future auth changes are a config update, not a rewrite.
The facts straight from the source
Facts above are extracted from the source and checked word-for-word before publishing. The guidance sections are AI-assisted analysis based only on those facts: a starting point, not legal or procurement advice. Spotted an error? Tell us.
Related changes
- SnowflakeSnowpipe switches to a flat 0.0037 credits per GB
Snowpipe billing switches from per-second/per-core compute plus per-1,000-files fee to a fixed 0.0037 credits per GB ingested, applied automatically.
Billing - SnowflakeSnowflake signs agreement to acquire Observe
Snowflake announced a signed definitive agreement to acquire Observe, an AI-powered observability vendor, pending regulatory approval.
M&A - Amazon RedshiftAmazon Redshift DC2 nodes retired April 23, 2026
DC2 node type feature development stops at release P191, and DC2 clusters retire on April 23, 2026 on the LTM track; customers should move to Serverless or RA3.
End of support - SnowflakeSnowflake: new service users can no longer use passwords (LEGACY_SERVICE blocked)
After enforcement, new non-human users must be TYPE=SERVICE, and LEGACY_SERVICE is invalid in CREATE USER or ALTER USER.
End of support - SAPSAP BW 7.5 mainstream maintenance ends
Mainstream maintenance for SAP BW 7.5 ends December 31, 2027, with extended maintenance available through 2030.
End of support - SAPSAP BW 7.5 extended maintenance ends
Extended maintenance for SAP BW 7.5, BI Java based Broadcasting and BEx Query Designer ends December 31, 2030.
End of support