MySQL 8 Administrator???s Guide

General guidelines

In MySQL 8, all connections, queries, and operations performed by the user are based on the Access Control Lists (ACLs) security. The following are some general guidelines related to security:

• Don't allow access to the user table to any user except the root account. Manage user privileges with GRANT and REVOKE statements.
• Use encrypted protocol, such as SSH or SSL, in the case of data transfer over the internet. MySQL 8 supports SSL connections for that.
• Use proper defensive programming techniques at the time when the client is entering data into MySQL using an application.
• Use a hashing function to store passwords into the MySQL 8 database; don't store plain text as a password. As the same way for password recovery consider ...