Run the following query to retrieve the user and password columns: SELECT User, Host, authentication_string FROM mysql.user; ...

Also, be sure those users use very strong passwords. When you combine that with keeping your MySQL server up to date, you should be good to go. Check out this article I found on TechRepublic.