SASL is an IRCv3 feature that allows authentication to services while connecting.

Because this is an IRCv3 feature, not every IRC network has support for SASL authentication. The CAP LS command can be used to detect SASL capabilities.

The PLAIN mechanism allows you to authenticate with your NickServ username and password.

The EXTERNAL mechanism allows you to authenticate with your SSL client certificate. (This mechanism requires you be connected via SSL/TLS)

Client Usage

AndroIRC

PLAIN

• Add/Edit a server and check the "Authentication" box.
• Change the "Authentication service" to "SASL".
• Change the "Authentication TYPE" to "PLAIN".
• Enter your NickServ information for "Username" and "Password".

HexChat / XChat

PLAIN

• Add/Edit a network, change "Login method" to "SASL (username + password)" and change "Password" to your NickServ password.

EXTERNAL

• Add/Edit a network, change "Login method" to "SASL EXTERNAL (cert)".

irssi

PLAIN

• /network add -sasl_username <username> -sasl_password <password> -sasl_mechanism PLAIN <network_name>

EXTERNAL

• /network add -sasl_mechanism EXTERNAL <network_name>

mIRC

PLAIN

• Options Menu -> Connect -> Servers
• Add/Edit a serverm, change "Method" to "SASL (/CAP)" and change "Password" to "<username>:<password>" using your NickServ information.

EXTERNAL

• Options Menu -> Connect -> Servers
• Add/Edit a serverm, change "Method" to "SASL EXTERNAL (/CAP)".

WeeChat

PLAIN

• /set irc.server.<network_name>.sasl_mechanism plain
• /set irc.server.<network_name>.sasl_username <username>
• /set irc.server.<network_name>.sasl_password <password>

EXTERNAL

• /set irc.server.<network_name>.sasl_mechanism external

ZNC

PLAIN

• /msg *status LoadMod sasl
• /msg *sasl Mechanism PLAIN
• /msg *sasl Set <username> <password>

EXTERNAL

• /msg *status LoadMod sasl
• /msg *sasl Mechanism EXTERNAL