Skip to Main Content
The world's most popular open source database
Contact MySQL
|
Login
|
Register
MySQL.com
Downloads
Documentation
Developer Zone
Developer Zone
Downloads
MySQL.com
Documentation
MySQL Server
MySQL Enterprise
Workbench
InnoDB Cluster
MySQL NDB Cluster
Connectors
More
MySQL.com
Downloads
Developer Zone
Section Menu:
Documentation Home
MySQL 8.0 Reference Manual
Preface and Legal Notices
General Information
Installing MySQL
Upgrading MySQL
Downgrading MySQL
Tutorial
MySQL Programs
MySQL Server Administration
Security
General Security Issues
Security Guidelines
Keeping Passwords Secure
End-User Guidelines for Password Security
Administrator Guidelines for Password Security
Passwords and Logging
Making MySQL Secure Against Attackers
Security-Related mysqld Options and Variables
How to Run MySQL as a Normal User
Security Considerations for LOAD DATA LOCAL
Client Programming Security Guidelines
Access Control and Account Management
Account User Names and Passwords
Privileges Provided by MySQL
Grant Tables
Specifying Account Names
Specifying Role Names
Access Control, Stage 1: Connection Verification
Access Control, Stage 2: Request Verification
Adding Accounts, Assigning Privileges, and Dropping Accounts
Reserved Accounts
Using Roles
Account Categories
Privilege Restriction Using Partial Revokes
When Privilege Changes Take Effect
Assigning Account Passwords
Password Management
Server Handling of Expired Passwords
Pluggable Authentication
Multifactor Authentication
Proxy Users
Account Locking
Setting Account Resource Limits
Troubleshooting Problems Connecting to MySQL
SQL-Based Account Activity Auditing
Using Encrypted Connections
Configuring MySQL to Use Encrypted Connections
Encrypted Connection TLS Protocols and Ciphers
Creating SSL and RSA Certificates and Keys
Creating SSL and RSA Certificates and Keys using MySQL
Creating SSL Certificates and Keys Using openssl
Creating RSA Keys Using openssl
Connecting to MySQL Remotely from Windows with SSH
Reusing SSL Sessions
Security Components and Plugins
Authentication Plugins
Native Pluggable Authentication
Caching SHA-2 Pluggable Authentication
SHA-256 Pluggable Authentication
Client-Side Cleartext Pluggable Authentication
PAM Pluggable Authentication
Windows Pluggable Authentication
LDAP Pluggable Authentication
Kerberos Pluggable Authentication
No-Login Pluggable Authentication
Socket Peer-Credential Pluggable Authentication
FIDO Pluggable Authentication
Test Pluggable Authentication
Pluggable Authentication System Variables
Connection Control Plugins
Connection Control Plugin Installation
Connection Control Plugin System and Status Variables
The Password Validation Component
Password Validation Component Installation and Uninstallation
Password Validation Options and Variables