In systems nowadays, improving security is a must! One of the
weakest links in the security system is the user password from
where an attacker can enter. In order to improve password
strength and security, MySQL provides a plugin called
“Validation plugin” which can be configured to
enforce a set of rules for passwords.
Installation
The plugin can be enabled by executing the following at runtime:
INSTALL PLUGIN validate_password SONAME 'validate_password.so';
Or by adding the plugin in the configuration file, but this
requires bouncing MySQL for it to take effect:
[mysqld]
plugin-load-add=validate_password.so
It’s also suggested to add the following variable in my.cnf so
that the plugin cannot be removed at runtime (also requires a
MySQL bounce to take effect):
[mysqld]
validate-password=FORCE_PLUS_PERMANENT
Checking Installation
…
[Read more]