>What is the point on even having a database password? Fuck-ups happen, and an insecure password does a good job of preventing any activity that doesn't explic

>What is the point on even having a database password? Fuck-ups happen, and an insecure password does a good job of preventing any activity that doesn't explicitly include the password. Like, suppose you have some dev tool that does things to a database. If your local dev environment does not have a password on the db, and the application environment does, odds are your tool is going to work locally but not in the application environment. Basically, it can be a form of "type 'password1' if you are sure you want to do things to prod".