By default, MongoDB uses SCRAM-SHA-1 as the default challenge and response authentication mechanism. This is an SHA-1 username/password-based mechanism for authentication. All drivers and the mongo shell itself have built-in methods to support it.
The authentication protocol in MongoDB has changed since version 3.0. In older versions, the less secure MONGODB-CR was used.