I wonder if there is any possibility to use the password validation for MySQL 5.6 (https://dev.mysql.com/doc/refman/5.6/en/validate-password.html) to prevent for example the last 4 passwords.

The possibility to prevent a user from choosing a simple password but allow the user to always choose the same password seems to be a little bit odd.

Sadly I am not able to upgrade the MySQL server.

  • Are you talking about MySQL credentials or your app credentials? MySQL uses the authentication plugin only to control mysql.user table. Oct 10 '19 at 21:00
  • I mean MySQL credentials stored in mysql.user table.
    – niecke
    Oct 11 '19 at 21:57
  • Write your own API front end; don't let the users log in directly to MySQL.
    – Rick James
    Oct 15 '19 at 0:04
  • Writing an API which has access to the internal mysql tables is no feasible solution for my use case.
    – niecke
    Oct 15 '19 at 8:07
  • Are you using the mysql.user table as a way to manage user accounts for your application? What's the use case here? Are you trying to implement domain-level password policies for db administrators?
    – jcolebrand
    Oct 15 '19 at 17:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.