In systems nowadays, improving security is a must! One of the weakest links in the security system is the user password from where an attacker can enter. In order to improve password strength and security, MySQL provides a plugin called “Validation plugin” which can be configured to enforce a set of rules for passwords.
Installation
The plugin can be enabled by executing the following at runtime:
INSTALL PLUGIN validate_password SONAME 'validate_password.so';
Or by adding the plugin in the configuration file, but this requires bouncing MySQL for it to take effect:
[mysqld] plugin-load-add=validate_password.so
It’s also suggested to add the following variable in my.cnf so that the plugin cannot be removed at runtime (also requires a MySQL bounce to take effect):
[mysqld] validate-password=FORCE_PLUS_PERMANENT
Checking Installation
…[Read more]