Tecadmin published a tutorial about enabling authentication in MongoDB instance.
How to Enable Authentication in MongoDB Instance
The default MongoDB install with no password for accessing databases. You can enforce authentication in the MongoDB server to add an extra layer of security. You may have controlled MongoDB server to accept request from your local area network only, but still there are chances for the hacker to inject malicious script to your server.
How to Enable Authentication in MongoDB Instance
