MySQL 8 Administrator???s Guide

Guidelines for administrators

For a database administrator, the following guidelines should be followed to secure passwords:

• Use validate_password to apply the policy on accepted passwords
• MySQL 8 uses the mysql.user table to store user passwords, so configure the system in a way that only administrative users can access this table
• Users should be allowed to reset account passwords in the case of expired passwords
• Apply protection on the log file if it contains passwords
• Manage access to the plugin directory and the my.cnf file, because it can modify capabilities provided by the plugins