Securing the Initial MySQL Accounts

• Grant tables define the initial MySQL user accounts and their access privileges.

• These accounts are set up as follows:
  • Two accounts with the username root are created.
  • These are superuser accounts that can do anything.
  • The initial root account passwords are empty.
    • Anyone can connect to the MySQL server as root — without a password — and be granted all privileges.

• Two anonymous-user accounts are created, each with an empty username.
  • The anonymous accounts have no password.
    • Anyone can use them to connect to the MySQL server.

• None of the initial accounts have passwords.
  • This means the MySQL installation is unprotected.
    • Either assign a password to each anonymous account or else remove the accounts.
    • Assign a password to each MySQL root account.

How do I set passwords?

---

---

© 2007 John Michael Pierobon

Notes