MySQL ships with four predefined accounts: [email protected], [email protected]%, @%, and @localhost. The MySQL administrative user uses the [email protected] and [email protected]% accounts to create new users, databases, and so forth. The @% and @localhost accounts are used for what MySQL terms anonymous connections. When users don't supply credentials, MySQL uses the anonymous connections to grant access. While you're learning MySQL, you might want to keep these connections active. However, they represent a security risk, so be sure you delete the anonymous connections in a production network. To delete the connections, double-click User Administration in MySQL Control Center (MySQLCC), right-click the @% and @localhost accounts, and click Delete User.
While you're in the User Administration menu, you might also want to change the root user's password, which is blank by default. To do so, right-click the [email protected] host and [email protected]% accounts, click Edit User, and update the password.