{"id":3557,"date":"2020-04-15T08:24:12","date_gmt":"2020-04-15T07:24:12","guid":{"rendered":"http:\/\/dasini.net\/blog\/?p=3557"},"modified":"2020-05-20T11:00:11","modified_gmt":"2020-05-20T10:00:11","slug":"mysql-security-random-password-generation","status":"publish","type":"post","link":"https:\/\/dasini.net\/blog\/2020\/04\/15\/mysql-security-random-password-generation\/","title":{"rendered":"MySQL Security – Random Password Generation"},"content":{"rendered":"\n

When thinking about security within a MySQL installation, you can consider a wide range of possible procedures \/ best practices and how they affect the security of your MySQL server and related applications. <\/p>\n\n\n\n

MySQL provides many tools \/ features \/ plugins or components in order to protect your data including some advanced features like Transparent Data Encryption<\/strong> (TDE)<\/a>,\u00a0Audit<\/a><\/strong>, Data Masking & De-Identification<\/a><\/strong>, Firewall<\/a><\/strong>, Password Expiration Policy<\/strong><\/a>, Password Reuse Policy<\/strong><\/a>, Password Verification-Required Policy<\/strong><\/a>, Failed-Login Tracking and Temporary Account Locking<\/strong><\/a>, Dual Password Support<\/strong><\/a>, Connection-Control Plugins<\/a>, Password Validation Component, etc\u2026<\/p>\n\n\n\n

\n
\"MySQL<\/figure><\/div>\n<\/div><\/div>\n\n\n\n

Basic password policy practices teaches us :<\/p>\n\n\n\n

  • Each user must have a password<\/li>
  • A user’s password should be changed periodically<\/li><\/ul>\n\n\n\n

    Indeed this is a good start !<\/p>\n\n\n\n

    What if MySQL make your life easier by helping you to create user with strong secure password?
    Well it is now possible in MySQL 8.0 \ud83d\ude42<\/p>\n\n\n\n\n\n

    \n\n\n\n

    TL;DR<\/h3>\n\n\n\n

    MySQL has the capability of generating random passwords for user accounts, as an alternative to requiring explicit administrator-specified literal passwords.<\/p>\n\n\n\n\n\n

    \n