Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I see these when running

-------- Security Recommendations  -------------------------------------------
[!!] User '@debian' has no password set.
[!!] User '@localhost' has no password set.
  • Is it a security hole?
  • How to fix it?


share|improve this question
up vote 4 down vote accepted

That is definite a security hole. That's because mysql was installed that way.

To remove those entries, please run these lines

DELETE FROM mysql.user WHERE user='' or password='';

Here are three(3) past posts I wrote on how and why to do such cleanup of mysql.user and mysql.db

share|improve this answer
Great answer, just a typo FLUSH PRIVILEGES: should be FLUSH PRIVILEGES; with semicolon. I copy-pasted and got an error, so tried to edit the answer but I was not allowed as it is not a 6+ chars edit... – Nicolas S Sep 30 '13 at 21:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.