phpMyAdmin can work while MySQL Workbench fails because they may use different network paths. A phpMyAdmin installation on the VPS commonly reaches MySQL through a Unix socket or the server’s loopback interface. Workbench running on your own computer must reach a TCP port on the VPS, unless you configure its SSH-tunnel connection method.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
That distinction tells you where to look: identify the error type, verify Workbench’s host and port, test reachability, inspect MySQL’s listener and account grants, then align TLS or use SSH so MySQL never needs to be exposed publicly.
As an Amazon Associate I earn from qualifying purchases.
Why phpMyAdmin succeeds on the VPS
phpMyAdmin may use a Unix socket
When phpMyAdmin and MySQL run on the same VPS, the web application can connect locally without traversing the network. On Unix systems, a MySQL client given the host name localhost normally attempts a Unix socket connection. A socket is a local file, so cloud-provider firewall rules, a closed public port, and an address that is not listening externally do not prevent that connection.
phpMyAdmin may instead use TCP on the loopback interface, usually 127.0.0.1. That still proves only that MySQL accepts local connections. It does not prove that the VPS accepts connections arriving from your workstation’s public or private address.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Workbench normally runs somewhere else
MySQL Workbench on a desktop or laptop is a separate network client. Its Standard TCP/IP method sends traffic to the hostname or IP address entered in the connection profile. The VPS must route that traffic, allow it through any provider and operating-system firewalls, have MySQL listening on that interface and port, and accept the account’s Host value. Entering localhost in Workbench refers to the computer running Workbench, not automatically to the VPS.
Classify the error before changing settings
The wording of the failure usually identifies the layer that is broken. Do not change MySQL grants when the packets never reach the server, and do not keep opening firewall ports after the server has already returned an authentication error.
| Workbench result | What it establishes | Next check |
|---|---|---|
| Timeout | Workbench did not receive a response in time. Routing, a provider rule, a host firewall, a wrong address or port, or a non-listening service is likely. | Resolve the name, probe the port, inspect both firewalls, and verify the listener. |
| Connection refused | The destination was reached, but no service accepted the TCP connection on that port, or a firewall actively rejected it. | Check MySQL’s port, bind_address, skip_networking, and firewall rules. |
Access denied |
MySQL was reached and rejected the supplied account, password, authentication method, or Host match. | Check the exact username, password, authentication plugin, and the account’s Host column. |
Host ... is not allowed to connect |
MySQL received the connection but no permitted account row matches that client host. | Review the account’s Host grants and use a narrow client address or network. |
Check every Workbench connection field
Create or edit the profile in Workbench and verify the endpoint independently of phpMyAdmin’s configuration.
- Choose the connection method. Select Standard TCP/IP only when the MySQL port is intentionally reachable from your computer. Select Standard TCP/IP over SSH when MySQL should remain local to the VPS.
- Set Hostname. For direct TCP, enter the VPS’s public IP, private-network IP, or DNS name that your computer can resolve. Do not use
localhostunless the database is on the same computer as Workbench. In SSH mode, enter the database host as seen from the VPS;127.0.0.1is common when MySQL listens locally. - Set Port. Enter the configured MySQL classic-protocol port. MySQL documents
3306/TCPas the default, but administrators often change it. A changed port must match MySQL, the provider rule, the host firewall, and Workbench. - Enter credentials. Use the MySQL account’s username and password, not the VPS operating-system login. Leave Default Schema blank for the first test; selecting a schema too early can hide a successful server login behind a database-name or privilege error.
- Save and test. Use Workbench’s connection test, then record the exact error text. A different error after one change is useful evidence that you moved to the next layer.
Test DNS, routing, and the port from your computer
Resolve the VPS name
Workbench documentation recommends testing name resolution with ping. A failed ping does not always mean TCP is impossible—many servers block ICMP—but a name resolving to the wrong address is a definitive problem. Check that the DNS name points to the current VPS address and that your computer is using the intended private network or VPN when a private address is required.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
ping VPS_HOSTProbe the MySQL port
Use a TCP test from the same computer that runs Workbench. The Workbench manual describes telnet as a port check; where netcat is installed, the following command is a practical equivalent:
nc -vz VPS_HOST 3306Replace 3306 with the configured port. A successful TCP probe confirms that routing and filtering permit a connection to that port; it does not prove that the MySQL account will authenticate. A timeout or refusal means you should stay in the transport layer and inspect rules and listeners before changing SQL privileges.
Verify that MySQL is listening on the expected interface
Log in to the VPS through its console or SSH and inspect the server configuration. Check the effective values rather than relying on an example configuration file:
mysql -uroot -p -e "SHOW VARIABLES WHERE Variable_name IN ('port','bind_address','skip_networking');"
ss -lntp | grep 3306The first command reports MySQL’s port, bind address, and whether TCP networking is disabled. The second shows listening TCP sockets on Linux; use the actual port if it is not 3306.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Understand bind_address
If bind_address is 127.0.0.1, MySQL accepts TCP connections only on the VPS loopback interface. Remote Workbench clients cannot connect to that listener. A wildcard or a specific private/public interface can accept remote traffic, but selecting a broader interface increases the importance of firewall restrictions and account grants. Change the setting only through your distribution’s MySQL configuration, restart or reload MySQL as required by that installation, and retest locally before testing remotely.
Understand skip_networking
When skip_networking is enabled, MySQL disables TCP/IP completely. Local socket clients such as phpMyAdmin can continue to work, which makes this setting a common explanation for the apparent contradiction. Disable it only if you deliberately need TCP, and then restrict who can reach the resulting listener.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Check provider and host firewalls without exposing the database
Two filtering layers commonly exist: the VPS provider’s security-group or firewall rule and the operating system’s firewall. Allow the selected MySQL port only from your administrator workstation’s fixed public IP or from the private network range used by your team. If your address changes frequently, an SSH tunnel or VPN is usually safer than continually broadening a public rule.
MySQL’s documented default classic protocol port is 3306/TCP. Opening that port to 0.0.0.0/0 (the entire internet) is not a sound diagnostic shortcut. It creates an attack surface before authentication, and closing it later does not undo credentials or logs exposed during the test. Confirm the provider rule, the VPS firewall rule, and any corporate or home-network egress policy in that order.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Make the MySQL account match the real client host
MySQL authenticates a pair: the user name and the connecting Host value. An account created for 'app'@'localhost' is not the same as 'app'@'203.0.113.25', even when the password is identical. A direct Workbench connection normally appears to MySQL as your workstation’s source address; an SSH-tunneled connection often appears as a local connection from the VPS.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →From an administrative MySQL session, inspect the account rows and grants:
SELECT User, Host FROM mysql.user ORDER BY User, Host;
SHOW GRANTS FOR 'app'@'localhost';Substitute the actual account and Host values. If the direct client address has no matching row, create or alter a narrowly scoped account according to your organization’s privilege policy. Grant only the schemas and operations Workbench needs. MySQL warns that a Host value of % matches any host; it may make a test succeed, but leaving it permanently permits connections from anywhere that can reach the port. Replace it with the specific administrator address or a tightly defined network after testing.
Align TLS settings and certificate verification
Transport reachability and authentication can both be correct while Workbench still rejects the connection because its TLS policy does not match the server. In a Standard TCP/IP profile, Workbench offers these modes:
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
| Workbench SSL mode | Behavior | Files or conditions |
|---|---|---|
| No | Do not request TLS. | Works only when the server permits unencrypted connections. |
| If available | Use TLS when the server offers it, otherwise continue without it. | Useful during migration, but it does not require encryption. |
| Require | Require an encrypted session. | Encryption is required, but server identity verification is not necessarily performed. |
| Require and Verify CA | Require TLS and validate the server certificate against a trusted certificate authority. | Provide the CA file in Workbench. |
| Require and Verify Identity | Require TLS, validate the CA, and verify that the certificate identity matches the host name. | Use a host name that matches the certificate and provide the required CA material. |
Set the mode to the policy configured on the VPS and fill in the CA, client certificate, or client key fields when the server requires them. Encryption without server verification protects the channel but does not prove that you connected to the intended server. phpMyAdmin documentation likewise recommends SSL for remote database connections; use certificates managed by your organization rather than disabling verification simply to make a test pass.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Use an SSH tunnel instead of publishing MySQL
Workbench’s Standard TCP/IP over SSH method sends the database traffic through an SSH connection. MySQL can continue listening only on the VPS’s local interface, while Workbench connects to the VPS over SSH. The SSH service normally uses 22/TCP, the port documented for the tunnel route.
- Ensure the VPS SSH service is reachable from your computer and that your SSH user is allowed to log in.
- In Workbench, choose Standard TCP/IP over SSH.
- Enter the VPS address and SSH port, commonly
22, in the SSH host fields. - Enter the SSH username and select password authentication or the private key file configured for that user. Confirm the VPS host key when Workbench prompts you, verifying the fingerprint through a trusted channel.
- In the MySQL section, enter the database host as reachable from the VPS, often
127.0.0.1, the local MySQL port, and the MySQL username and password. The SSH login and the MySQL account are separate credentials. - Test the profile. If it succeeds while direct TCP fails, remove the public MySQL firewall rule and leave only the SSH access path.
SSH tunneling reduces exposure, but it still requires disciplined SSH key handling, account permissions, host-key verification, and monitoring. It does not bypass MySQL grants or TLS requirements configured for the tunneled session.
Quick Recap
Direct TCP or SSH tunnel: which path fits?
| Decision point | Direct Standard TCP/IP | Standard TCP/IP over SSH |
|---|---|---|
| Transport | Workbench connects straight to the MySQL listener. | Workbench carries MySQL traffic inside an SSH connection. |
| Exposure | Requires a reachable MySQL port, often 3306/TCP. | MySQL can remain on a local/private interface; only SSH, commonly 22/TCP, is exposed. |
| Identity controls | Use provider and host firewall source rules plus MySQL Host grants. | Control SSH login and key access, then apply MySQL grants to the tunneled source. |
| Encryption | Use the Workbench TLS mode and certificates required by the server. | SSH encrypts the tunnel; retain MySQL TLS when policy requires database-layer encryption or certificate identity checks. |
| Operations | Simpler for a stable private network or tightly restricted administrator IP. | More setup and key management, but safer when a public database port is unnecessary. |
A practical recovery sequence
- Copy the exact Workbench error and classify it as transport, listener, authentication, Host grant, or TLS.
- Confirm the VPS address resolves correctly and that you are using the intended public or private route.
- Verify the configured MySQL port and test it with
nc -vzortelnet. - Inspect
bind_address,skip_networking, and the listening socket on the VPS. - Compare provider and operating-system firewall rules with the source address shown by your workstation.
- For an authentication error, inspect the MySQL account’s User and Host rows and its grants; do not widen Host to
%as a permanent fix. - Match Workbench’s SSL mode and certificate files to the server policy.
- If direct exposure is not a requirement, configure the SSH method, verify the SSH host key, and close the public MySQL rule.
Security checklist before leaving the connection enabled
- Use a private network or SSH tunnel whenever administrators do not need a public MySQL endpoint.
- If direct TCP is necessary, permit only known administrator addresses at both firewall layers.
- Keep MySQL on the smallest practical interface set and avoid unnecessary wildcard binds.
- Create a least-privilege Workbench account instead of using the MySQL superuser for routine work.
- Replace temporary wildcard Host grants with a specific address or narrow network.
- Require TLS where policy calls for it, and verify the certificate authority and server identity rather than relying on encryption alone.
- Document the actual port, listener address, firewall source, account Host value, and certificate files so the next change can be diagnosed without guessing.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
