The Mosquitto MQTT broker can be configured to require client authentication using a valid username and password before a connection is permitted. The username and password combination is transmitted in clear text, and is not secure without some form of transport encryption.(SSL) However using username and password authentication does provide an easy way of restricting access to a broker.
Continue reading