Password Complexity

These variables control password complexity requirements. For each variable, the default value is 0 (disabled) and the accepted values are integers from 0 to 100.

password_min_length: The minimum number of characters required.

password_min_uppercase_chars: The minimum number of uppercase characters required.

password_min_lowercase_chars: The minimum number of lowercase characters required.

password_min_numeric_chars: The minimum number of numeric digit characters required.

password_min_special_chars: The minimum number of special (non-alphanumeric) characters required.

password_max_consec_sequential_chars: The maximum number of consecutive characters allowed. For example, if set to 3, passwords with a 4-letter sequence or longer (e.g “1234” or “abcd”) are disallowed.

password_max_consec_repeat_chars: The maximum number of consecutive repeated characters allowed. For example, if set to 3, passwords with 4 or more consecutive repeated characters (e.g., “aaaa” or “1111”) are disallowed.

When a user enters a new password, if the password does not meet the complexity policy, the following error message is returned:

Error: password does not meet the requirements specified for <variable> in your password complexity policy. Password not changed.

CREATE DATABASE db_security
USE db_security

DELIMITER //
CREATE OR REPLACE PROCEDURE set_password_complexity_policy() AS
BEGIN
    SET GLOBAL password_min_length=12;
    SET GLOBAL password_min_uppercase_chars=1;
    SET GLOBAL password_min_lowercase_chars=1;
    SET GLOBAL password_min_numeric_chars=1;
    SET GLOBAL password_min_special_chars=1;
END
//
DELIMITER ;

CALL set_password_complexity_policy();