{"id":590,"date":"2023-12-01T07:57:01","date_gmt":"2023-12-01T07:57:01","guid":{"rendered":"https:\/\/blog.hostinger.io\/support\/2023\/12\/01\/8661850-how-to-secure-mysql-on-ubuntu-22-04-with-lamp-lemp-stack-templates\/"},"modified":"2023-12-01T07:57:01","modified_gmt":"2023-12-01T07:57:01","slug":"8661850-how-to-secure-mysql-on-ubuntu-22-04-with-lamp-lemp-stack-templates","status":"publish","type":"post","link":"https:\/\/www.hostinger.com\/support\/8661850-how-to-secure-mysql-on-ubuntu-22-04-with-lamp-lemp-stack-templates\/","title":{"rendered":"How to Secure MySQL on Ubuntu 22.04 With LAMP\/LEMP Stack Templates"},"content":{"rendered":"

A LAMP<\/a><\/b> stack is a bundle of open-source software <\/b>commonly installed together, transforming a server into a hub for hosting dynamic websites and PHP-based web applications. The acronym breaks down into the Linux <\/b>operating system and the Apache <\/b>web server; site data finds its home in a MySQL<\/b> database, while PHP<\/b> takes the lead in processing dynamic content.<\/p>

\n<\/p>

To authenticate to MySQL with a root user using a password<\/b>, follow these steps 👇 <\/p>

\n<\/p>

First, open up the MySQL prompt<\/b>:<\/p>

sudo mysql<\/code><\/pre>
Then, run the following ALTER USER<\/code> command to change the root authentication method<\/b>. The following example changes the authentication method to mysql_native_password<\/code>:<\/p>
ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'password';<\/code><\/pre>
Finally, exit the MySQL prompt:<\/p>
exit<\/code><\/pre>
\n<\/p>
Following that, we recommend that you run a script <\/b>that comes pre-installed with MySQL to configure the access and security<\/b> of MySQL as you like. It is an interactive script<\/b> that requires you to answer Yes<\/code> or No<\/code> to the provided conditions.<\/p>
\n<\/p>
Start the script by running the following command:<\/p>
sudo mysql_secure_installation<\/code><\/pre>
This will ask if you want to configure VALIDATE_PASSWORD_PLUGIN<\/code>:<\/p>
VALIDATE PASSWORD PLUGIN can be used to test passwords
and improve security. It checks the strength of password
and allows the users to set only those passwords which are
secure enough. Would you like to set up VALIDATE PASSWORD plugin?

Press y|Y for Yes, any other key for No:<\/code><\/pre>
Note that if enabled, passwords that don’t match the specified criteria<\/b> will be rejected<\/b> by MySQL with an error.<\/p>
There are three levels of password validation policy:

LOW    Length >= 8
MEDIUM Length >= 8, numeric, mixed case, and special characters
STRONG Length >= 8, numeric, mixed case, special characters and dictionary              file

Please enter 0 = LOW, 1 = MEDIUM and 2 = STRONG: <\/code><\/pre>
\n<\/p>
You will also be asked about the following:<\/p>
\n\n\n\n\n\n\n\n
\n
Prompt<\/b><\/p>\n<\/td>\n
\n
Explanation<\/b><\/p>\n<\/td>\n<\/tr>\n
\n
Remove Anonymous Users<\/b><\/p>\n<\/td>\n
\n
The script will ask if you want to remove anonymous users:<\/p>\n
    \n
  • \n
    Press Y<\/b> to remove (recommended), or N<\/b> to keep them<\/p>\n<\/li>\n
  • \n
    It’s generally a good idea to remove anonymous users for security reasons<\/p>\n<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
\n
Disallow Root Login Remotely<\/b><\/p>\n<\/td>\n
\n
You’ll be asked if you want to disallow root login remotely:<\/p>\n
    \n
  • \n
    Press Y<\/b> to disallow it (recommended), or N<\/b> if you need to log in remotely as the root user<\/p>\n<\/li>\n
  • \n
    For security reasons, it’s recommended to disallow remote root login<\/p>\n<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
\n
Remove the Test Database<\/b><\/p>\n<\/td>\n
\n
The script will ask if you want to remove the test database:<\/p>\n
    \n
  • \n
    Press Y<\/b> to remove (recommended), or N<\/b> to keep it<\/p>\n<\/li>\n
  • \n
    It’s advisable to remove the test database, especially in a production environment<\/p>\n<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
\n
Reload Privilege Tables<\/b><\/p>\n<\/td>\n
\n
The script will reload the privilege tables to apply the changes you made. Press Y<\/b> to reload the tables.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>
And that’s it! You’ve successfully secured MySQL <\/b>on an Ubuntu 22.04 Lamp\/Lemp Stack VPS<\/a><\/b> provided by Hostinger.<\/p>\n","protected":false},"excerpt":{"rendered":"
Enhancing Database Security: A Comprehensive Guide to Safeguarding MySQL on Ubuntu 22.04 Using Lamp\/Lemp Stack Templates<\/p>\n","protected":false},"author":581,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"include_on_kodee":true,"footnotes":""},"categories":[199],"tags":[],"class_list":["post-590","post","type-post","status-publish","format-standard","hentry","category-vps-management"],"hreflangs":[{"locale":"en-US","link":"https:\/\/www.hostinger.com\/support\/8661850-how-to-secure-mysql-on-ubuntu-22-04-with-lamp-lemp-stack-templates\/","default":1},{"locale":"es-ES","link":"https:\/\/www.hostinger.com\/es\/support\/8661850-como-proteger-mysql-en-ubuntu-22-04-con-plantillas-lamp-lemp-stack-en-hostinger\/","default":0}],"include_on_kodee":true,"_links":{"self":[{"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/posts\/590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/users\/581"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/comments?post=590"}],"version-history":[{"count":0,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/posts\/590\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/media?parent=590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/categories?post=590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hostinger.com\/support\/wp-json\/wp\/v2\/tags?post=590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}