3633
MySQLERRORNotableAccess ControlHIGH confidence
MFA methods cannot be identical
Production Risk
Low — ALTER USER fails; existing authentication is unchanged.
How to reproduce
trigger — this will error
trigger — this will error
ALTER USER 'user'@'%' ADD 2 FACTOR IDENTIFIED WITH caching_sha2_password; -- same as factor 1
expected output
ERROR 3633 (HY000): MFA methods cannot be identical.
Fix
Use distinct plugins for each factor
Use distinct plugins for each factor
ALTER USER 'user'@'%' ADD 2 FACTOR IDENTIFIED WITH authentication_fido;
Why this works
Assigns a different authentication plugin for the second factor.
What not to do
✕
Version notes
Sources
Official documentation ↗
MySQL 8.0 — 3633 ER_MFA_METHODS_IDENTICAL
Content generated with AI assistance and reviewed for accuracy. Found an error? hello@errcodes.dev