...

Log on as the MySQL root user in session #1.

mysql -u root -p

In the second shell (after successfully logging in above) run the below command, substituting YOUR_NEW_ROOT_PASSWORD.

mysql -u root -p -e "USE mysql; SET PASSWORD FOR 'root'@'localhost' = password('YOUR_NEW_ROOT_PASSWORD'); FLUSH PRIVILEGES;

Now try to log in using that same (second) shell.

mysql -u root -pYOUR_NEW_ROOT_PASSWORD

If you can log in, you're all done!

...

SELECT User, Host, Password FROM mysql.user;

And change the SET PASSWORD command above to reflect the Host value in the second session.

Restricting MySQL to localhost

...

On some Linux distributions, you might find MySQL listening on all IP addresses. Unless you have a specific reason for this, it is very much recommended to restrict this to localhost.

You can check the listening address by running the below command.

For Debian and Ubuntu

sudo grep -R bind /etc/mysql/

For Redhat and Centos

sudo grep -R bind /etc/my.cnf.d/

If you don't get a result, try runnig the below netstat command.

sudo netstat -lntup | grep mysqld

If you see an IP address of 0.0.0.0, this means MySQL is listening on all available IPs.

You should configure the bind-address to be 127.0.0.1 in:

Debian / Ubuntu: /etc/mysql/mariadb.conf.d/50-server.cnf

Redhat / Centos: /etc/my.cnf.d/server.cnf

Credentials Encryption Key

...