Securing the Initial MySQL Accounts
- Grant tables define the initial MySQL user accounts and their access privileges.
- These accounts are set up as follows:
- Two accounts with the username
root are created.
- These are superuser accounts that can do anything.
- The initial
root account passwords are empty.
- Anyone can connect to the MySQL server as
root — without a password — and be granted all privileges.
- Two anonymous-user accounts are created, each with an empty username.
- The anonymous accounts have no password.
- Anyone can use them to connect to the MySQL server.
- None of the initial accounts have passwords.
- This means the MySQL installation is unprotected.
- Either assign a password to each anonymous account or else remove the accounts.
- Assign a password to each MySQL
root account.
How do I set passwords?
© 2007 John Michael Pierobon
Notes