Resetting the Administrator Password to Restore root Access

Scenarios

If you forget the password of the administrator account root, you can reset the password. The new password is applied immediately without rebooting the instance.

Precautions

• If the password you provide is regarded as a weak password by the system, you will be prompted to enter a stronger password.
• If you have changed the administrator password of the primary DB instance, the administrator passwords of the standby DB instance and read replicas (if any) will also be changed.
• The time required for the new password to take effect depends on the amount of service data currently being processed by the primary DB instance.
• To protect against brute force hacking attempts and ensure system security, change your password periodically.
• If you have logged in to your instance as the root user, resetting the password may interrupt services. Exercise caution when performing this operation.

Method 1

1. Log in to the RDS console.
2. Click in the upper left corner and select a region.
3. On the Instances page, locate the target DB instance and choose More > Reset Password in the Operation column.
4. If you have enabled operation protection, click Send Code in the displayed Identity Verification dialog box and enter the obtained verification code. Then, click OK.

   Two-factor authentication improves the security of your account and cloud product. For details about how to enable operation protection, see Identity and Access Management User Guide.

5. Enter and confirm the new password.
   Figure 1 Resetting the administrator password
   
   

   Keep this password secure. The system cannot retrieve it.

   • If the instance uses a system parameter template, the password must consist of 8 to 32 characters and contain at least four of the following character types: uppercase letters, lowercase letters, digits, and special characters: ~ ! @ # $ % ^ * - _ = + ? , ( ) & . |
   • If the instance uses a custom parameter template, the allowed character types depend on the parameter validate_password.policy (versions 8.0 and 8.4) or validate_password_policy (versions 5.6 and 5.7).
     • If the parameter is set to LOW, the password must consist of 8 to 32 characters and contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters: ~ ! @ # $ % ^ * - _ = + ? , ( ) & . |
     • If the parameter is set to MEDIUM, the password must consist of 8 to 32 characters and contain at least four of the following character types: uppercase letters, lowercase letters, digits, and special characters: ~ ! @ # $ % ^ * - _ = + ? , ( ) & . |
   Enter a strong password and periodically change it for security reasons.

   • To submit the new password, click OK.
   • To cancel the reset operation, click Cancel.

Method 2

1. Log in to the RDS console.
2. Click in the upper left corner and select a region.
3. On the Instances page, click the target instance name.
4. On the Overview page, find Administrator and click Reset Password under it.
5. If you have enabled operation protection, click Send Code in the displayed Identity Verification dialog box and enter the obtained verification code. Then, click OK.

   Two-factor authentication improves the security of your account and cloud product. For details about how to enable operation protection, see Identity and Access Management User Guide.

6. Enter and confirm the new password.
   Figure 2 Resetting the administrator password
   
   

   Keep this password secure. The system cannot retrieve it.

   • If the instance uses a system parameter template, the password must consist of 8 to 32 characters and contain at least four of the following character types: uppercase letters, lowercase letters, digits, and special characters: ~ ! @ # $ % ^ * - _ = + ? , ( ) & . |
   • If the instance uses a custom parameter template, the allowed character types depend on the parameter validate_password.policy (versions 8.0 and 8.4) or validate_password_policy (versions 5.6 and 5.7).
     • If the parameter is set to LOW, the password must consist of 8 to 32 characters and contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters: ~ ! @ # $ % ^ * - _ = + ? , ( ) & . |
     • If the parameter is set to MEDIUM, the password must consist of 8 to 32 characters and contain at least four of the following character types: uppercase letters, lowercase letters, digits, and special characters: ~ ! @ # $ % ^ * - _ = + ? , ( ) & . |
   Enter a strong password and periodically change it for security reasons.

   • To submit the new password, click OK.
   • To cancel the reset operation, click Cancel.