User IDs cannot:

• begin with white space, single quotes, or double quotes
• end with white space
• contain semicolons

Passwords are case-sensitive and they cannot:

• begin with white space, single quotes, or double quotes
• end with white space
• contain semicolons
• be longer than 255 bytes in length

When passwords are created or changed, they are converted to UTF-8 before being hashed and stored in the database. If the database is unloaded and reloaded into a database with a different character set, existing passwords continue to work. If the server cannot convert from the client's character set to UTF-8, then it is recommended that the password be composed of 7-bit ASCII characters as other characters may not work correctly.

By default, passwords must be 3 bytes in length. To change this requirement, set the min_password_length database option.

Additional rules for passwords can be set in a user's login policy.

• Dual control passwords
• Login policies