Windows 平台修改 MySQL 預設 Root 密碼：SET PASSWORD 與 mysqladmin 雙重保障

Windows 安裝後預設狀態

• MSI 安裝：安裝精靈已提示設定 Root 密碼
• ZIP/解壓安裝：**Root 空密碼、匿名帳號存在、通配符 Host 開放** — 必須立即手動加固

方法一：SET PASSWORD (登入後執行)

C:\> mysql -u root
Welcome to the MySQL monitor...
mysql> SET PASSWORD FOR 'root'@'localhost' = PASSWORD('NewStrongPass123!');
mysql> SET PASSWORD FOR 'root'@'127.0.0.1' = PASSWORD('NewStrongPass123!');
mysql> SET PASSWORD FOR 'root'@'::1' = PASSWORD('NewStrongPass123!');
-- 5.7+ 亦可用 ALTER USER
ALTER USER 'root'@'localhost' IDENTIFIED BY 'NewStrongPass123!';
FLUSH PRIVILEGES;

方法二：mysqladmin (命令列、腳本適用)

C:\> cd C:\mysql\bin
C:\mysql\bin> mysqladmin -u root password 'NewStrongPass123!'
# 若已有舊密碼
C:\mysql\bin> mysqladmin -u root -p'OldPass' password 'NewStrongPass123!'

清理危險預設帳號 (必做)

mysql -u root -p'NewStrongPass123!' -e "
DELETE FROM mysql.user WHERE User='';
DELETE FROM mysql.user WHERE Host='%';
DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('localhost','127.0.0.1','::1');
FLUSH PRIVILEGES;"

# 驗證
mysql -u root -p'NewStrongPass123!' -e "SELECT User,Host FROM mysql.user;"

驗證腳本 (批次檔)

@echo off
set MYSQL_BIN=C:\mysql\bin
set NEW_PASS=NewStrongPass123!
%MYSQL_BIN%\mysqladmin -u root -p%NEW_PASS% ping
if %errorlevel% equ 0 (
    echo [OK] Root 密碼設定成功
) else (
    echo [FAIL] Root 密碼設定失敗
    pause
)

結語

Windows MySQL 安裝後**必須立即修改 Root 密碼、清理匿名/通配符帳號、限制 Root 本機登入**。SET PASSWORD 適合互動式操作，mysqladmin 適合自動化腳本。雙重驗證確保密碼生效，納入部署清單標準化執行。