Account Management Statements auth_option : { IDENTIFIED BY ’ auth_string ’ [REPLACE ’ current_auth_string ’] [RETAIN CURRENT PASSWORD] | IDENTIFIED BY RANDOM PASSWORD [REPLACE ’ current_auth_string ’] [RETAIN CURRENT PASSWORD] | IDENTIFIED WITH  auth_plugin | IDENTIFIED WITH  auth_plugin  BY ’ auth_string ’ [REPLACE ’ current_auth_string ’] [RETAIN CURRENT PASSWORD] | IDENTIFIED WITH  auth_plugin  BY RANDOM PASSWORD [REPLACE ’ current_auth_string ’] [RETAIN CURRENT PASSWORD] | IDENTIFIED WITH  auth_plugin  AS ’ auth_string ’ | DISCARD OLD PASSWORD } user_func_auth_option : { IDENTIFIED BY ’ auth_string ’ [REPLACE ’ current_auth_string ’] [RETAIN CURRENT PASSWORD] | DISCARD OLD PASSWORD } tls_option : { SSL  | X509  | CIPHER ’ cipher ’  | ISSUER ’ issuer ’  | SUBJECT ’ subject ’ } resource_option : { MAX_QUERIES_PER_HOUR  count | MAX_UPDATES_PER_HOUR  count | MAX_CONNECTIONS_PER_HOUR  count | MAX_USER_CONNECTIONS  count } password_option : { PASSWORD EXPIRE [DEFAULT | NEVER | INTERVAL  N  DAY] | PASSWORD HISTORY {DEFAULT |  N } | PASSWORD REUSE INTERVAL {DEFAULT |  N  DAY} | PASSWORD REQUIRE CURRENT [DEFAULT | OPTIONAL] | FAILED_LOGIN_ATTEMPTS  N | PASSWORD_LOCK_TIME { N  | UNBOUNDED} } lock_option : { ACCOUNT LOCK | ACCOUNT UNLOCK } The  ALTER USER  statement modifies MySQL accounts. It enables authentication, role, SSL/TLS, resource-limit, and password-management properties to be modified for existing accounts. It can also be used to lock and unlock accounts. In most cases,  ALTER USER  requires the global  CREATE USER  privilege, or the  UPDATE  privilege for the mysql  system schema. The exceptions are: 2835 •Any client who connects to the server using a nonanonymous account can change the password for that account. (In particular, you can change your own password.) To see which account the server authenticated you as, invoke the  CURRENT_USER()  function: