> For the complete documentation index, see [llms.txt](https://mariadb.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mariadb.com/docs/server/reference/sql-functions/secondary-functions/encryption-hashing-and-compression-functions/password.md).

# PASSWORD

## Syntax

```bnf
PASSWORD(str)
```

## Description

The `PASSWORD()` function is used for hashing passwords for use in authentication by the MariaDB server. It is not intended for use in other applications.

Calculates and returns a hashed password string from the plaintext password *str*. Returns an empty string if the argument is `NULL`.

The return value is a nonbinary string in the connection [character set and collation](/docs/server/reference/data-types/string-data-types/character-sets.md), determined by the values of the [character\_set\_connection](/docs/server/server-management/variables-and-modes/server-system-variables.md#character_set_connection) and [collation\_connection](/docs/server/server-management/variables-and-modes/server-system-variables.md#collation_connection) system variables.

This is the function that is used for hashing MariaDB passwords for storage in the Password column of the [user table](/docs/server/reference/system-tables/the-mysql-database-tables/mysql-user-table.md) (see [privileges](/docs/server/reference/sql-statements/account-management-sql-statements/grant.md)), usually used with the [SET PASSWORD](/docs/server/reference/sql-statements/account-management-sql-statements/set-password.md) statement. It is not intended for use in other applications.

The function takes into account the authentication plugin where applicable (a [CREATE USER](/docs/server/reference/sql-statements/account-management-sql-statements/create-user.md) or [SET PASSWORD](/docs/server/reference/sql-statements/account-management-sql-statements/set-password.md) statement). For example, when used in conjunction with a user authenticated by the [ed25519 plugin](/docs/server/reference/plugins/authentication-plugins/authentication-plugin-ed25519.md), the statement will create a longer hash:

```sql
CREATE USER edtest@localhost IDENTIFIED VIA ed25519 USING PASSWORD('secret');

CREATE USER edtest2@localhost IDENTIFIED BY 'secret';

SELECT CONCAT(user, '@', host, ' => ', JSON_DETAILED(priv)) FROM mysql.global_priv
  WHERE user LIKE 'edtest%'\G
*************************** 1. row ***************************
CONCAT(user, '@', host, ' => ', JSON_DETAILED(priv)): edtest@localhost => {
...
    "plugin": "ed25519",
    "authentication_string": "ZIgUREUg5PVgQ6LskhXmO+eZLS0nC8be6HPjYWR4YJY",
...
}
*************************** 2. row ***************************
CONCAT(user, '@', host, ' => ', JSON_DETAILED(priv)): edtest2@localhost => {
...
    "plugin": "mysql_native_password",
    "authentication_string": "*14E65567ABDB5135D0CFD9A70B3032C179A49EE7",
...
}
```

The behavior of this function is affected by the value of the [old\_passwords](/docs/server/server-management/variables-and-modes/server-system-variables.md#old_passwords) system variable. If this is set to `1` (`0` is default), MariaDB reverts to using the [mysql\_old\_password authentication plugin](/docs/server/reference/plugins/authentication-plugins/authentication-plugin-mysql_old_password.md) by default for newly created users and passwords.

## Examples

```sql
SELECT PASSWORD('notagoodpwd');
+-------------------------------------------+
| PASSWORD('notagoodpwd')                   |
+-------------------------------------------+
| *3A70EE9FC6594F88CE9E959CD51C5A1C002DC937 |
+-------------------------------------------+
```

```sql
SET PASSWORD FOR 'bob'@'%.loc.gov' = PASSWORD('newpass');
```

## See Also

* [Password Validation Plugins](/docs/server/reference/plugins/password-validation-plugins.md) - permits the setting of basic criteria for passwords
* [OLD\_PASSWORD()](/docs/server/reference/sql-functions/secondary-functions/encryption-hashing-and-compression-functions/old_password.md) - pre-MySQL 4.1 password function

<sub>*This page is licensed: GPLv2, originally from*</sub> [<sub>*fill\_help\_tables.sql*</sub>](https://github.com/MariaDB/server/blob/main/scripts/fill_help_tables.sql)

{% @marketo/form formId="4316" %}