Dual-password capability makes it possible to seamlessly perform credential changes without downtime.
DBA can configure user accounts such that too many consecutive login failures cause temporary account locking.
MySQL 8.0 has introduced an optional behavior that authorize users to change their password only if they could provide the current password.
MySQL provides password-reuse capability, which allows database administrators to determine the number of unique passwords a user must use before they can use an old password again.
MySQL provides password-expiration capability, which enables database administrators to require that users reset their password.
MySQL has the capability of generating random passwords for user accounts, as an alternative to requiring explicit administrator-specified literal passwords.