Port 5432: PostgreSQL

What is port 5432 used for?

The default PostgreSQL database port.

Should port 5432 be open?

Don’t expose to the internet. Keep this port on private networks and reach it through a VPN or SSH tunnel. Set listen_addresses and pg_hba.conf to allow only your app servers.

See what is listening on port 5432

# Linux
sudo ss -tlnp | grep ':5432 '

# macOS
sudo lsof -nP -i TCP:5432 -sTCP:LISTEN

# Windows (PowerShell)
Get-NetTCPConnection -LocalPort 5432 -State Listen

Open or block port 5432 in a firewall

# Ubuntu / Debian (ufw)
sudo ufw allow 5432/tcp
sudo ufw deny 5432/tcp

# Windows (PowerShell, as administrator)
New-NetFirewallRule -DisplayName "Port 5432" -Direction Inbound -Protocol TCP -LocalPort 5432 -Action Allow

On cloud servers, also open the port in the provider’s security group or network firewall. At home, a service behind a router needs a port-forwarding rule to the device’s local IP.

Test it from outside

A port can be open on the server but blocked upstream. The Port Checker connects from the internet, so it shows what the world sees. From your own machine, use nc -vz example.com 5432 (macOS/Linux) or Test-NetConnection example.com -Port 5432 (Windows).