DBA can configure user accounts such that too many consecutive login failures cause temporary account locking.
MySQL 8.0 has introduced an optional behavior that authorize users to change their password only if they could provide the current password.
MySQL provides password-reuse capability, which allows database administrators to determine the number of unique passwords a user must use before they can use an old password again.
MySQL provides password-expiration capability, which enables database administrators to require that users reset their password.
MySQL has the capability of generating random passwords for user accounts, as an alternative to requiring explicit administrator-specified literal passwords.
MySQL Enterprise Data Masking and De-Identification hides sensitive information by replacing real values with substitutes in order to protect sensitive data while they are still look real and consistent.