Bug #85957 MySQL Installer should avoid using confusing letters in Temporary Password
Submitted: 15 Apr 2017 17:32 Modified: 18 Apr 2017 13:15
Reporter: Gurpreet Singh Email Updates:
Status: Won't fix Impact on me:
None 
Category:MySQL Server: Installing Severity:S3 (Non-critical)
Version:5.7.18 OS:Mac OS X (10.12.4)
Assigned to: CPU Architecture:Any
Tags: installer, password, temporary password

[15 Apr 2017 17:32] Gurpreet Singh
Description:
MySQL installer sets a temporary password for root@localhost upon installation. The installer should avoid confusing characters like I,l,i,0,O while setting the temporary password. 

How to repeat:
Install MySQL and check the temporary password. If there is no confusing password then do a reinstall.

Suggested fix:
Avoid confusing letters like L,l,I,0,O etc
[15 Apr 2017 17:33] Gurpreet Singh
My last MySQL Installation generated password nll<:GIHC3Ny. As the attached screenshot will show it was very hard to find which letter is L and which is I.
[15 Apr 2017 17:35] Gurpreet Singh
Password with confusing letters. Password is nl(lima)l(lima)<:GI(India)HC3Ny

Attachment: Screen Shot 2017-04-15 at 10.41.55 PM.png (image/png, text), 54.07 KiB.

[16 Apr 2017 0:28] MySQL Verification Team
Thank you for the bug report.
[18 Apr 2017 13:15] Georgi Kodinov
Posted by developer:
 
I understand the need. However limiting the repertoire of symbols used to generate the random password would make it less random and hence less secure. Note also that the password itself is stored into the server's error log so it can be copied from there. 
Feel free to reopen as a feature request for the installer to allow easier copying of the password into the OS clipboard.