The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
To connect Navicat to a remote MySQL server, you need four matching details in Navicat’s General tab—server host, listening TCP port, username, and password—and a MySQL account that permits connections from your client’s public IP. The server firewall and security groups must allow the path. If the database port is intentionally closed, configure Navicat’s SSH tunnel instead; the database host then only needs to be reachable from the SSH server.
What a remote Navicat connection requires
A successful connection has two independent parts:
- Network reachability: your computer must be able to reach the server name or IP on the MySQL listening port, or reach an SSH server that can forward the database connection.
- MySQL authorization: the server must have an account whose host pattern matches your source address and whose privileges include the database operations you need.
MySQL checks the source host before it evaluates database privileges. Therefore, a reachable server can still return an access-denied error when the account is restricted to another host or lacks permission on the requested schema.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteNavicat 17 documents the connection fields and workflow in its official manual. The labels can vary slightly by operating system, but the required values are the same.
Step 1: Collect the connection details
Ask the database administrator or hosting team for the exact values below. Do not assume that a familiar hostname or the default port is correct.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
- Database host: a DNS name or IP address for the MySQL server. If you will use an SSH tunnel, this is the database host as seen from the SSH server, not necessarily the address that is publicly reachable from your desktop.
- TCP/IP port: MySQL’s default is 3306, but administrators and hosting companies may use a different port.
- Database username and password: credentials for an account authorized for remote use.
- Allowed source address: the public IP address or approved range from which your client will connect.
- Tunnel details, when required: SSH server host, SSH port (commonly 22), SSH username, and either an SSH password or private key.
- TLS requirements: whether the server requires a CA certificate, client certificate, or other SSL/TLS settings.
Your public IP can change when an ISP renews a connection, when you move networks, or when a VPN is enabled. Record the address that the administrator actually allowlisted, and verify it again if the connection suddenly stops working.
Step 2: Create the MySQL connection in Navicat
- Open Navicat and choose the command to create a new MySQL connection.
- In the General tab, enter a descriptive connection name, such as
Production reporting. This name is local to Navicat and does not affect authentication. - Enter the remote database host name or IP address.
- Enter the server’s actual TCP/IP port. Use 3306 only when the administrator confirms that the server listens there.
- Enter the MySQL user name and password.
- Save the connection and use Navicat’s test or connect command.
If the server is configured for direct access and the firewall permits it, this is all the client-side configuration required. A successful login should show the server’s databases in Navicat’s connection pane, subject to the account’s privileges.
Step 3: Permit the client on the MySQL server
Match the account’s host pattern
MySQL accounts include both a user name and a host pattern. An account created only for localhost is not automatically valid for a connection arriving from your desktop’s public IP. Create or update an account whose host component matches the public IP or approved range used by the client.
Navicat’s help documentation shows this broad syntax example:
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
GRANT ALL PRIVILEGES ON *.* TO 'YourUserName'@'YourPublicIP' IDENTIFIED BY 'YourPassword';The statement illustrates the user-and-host format; it is not a recommendation to grant unrestricted production access. Scope permissions to the required schema and operations, and follow the SQL syntax supported by your MySQL version. A least-privilege grant uses a database-specific target such as appdb.* and only the required actions (for example, read-only reporting versus application writes). Avoid a wildcard host such as '%' unless your security policy explicitly requires it and compensating controls are in place.
After changing an account, verify that the account is permitted from the same public IP that Navicat will use. If your ISP or VPN changes that address, the existing host pattern may no longer match even though the username and password are unchanged.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchGrant only the operations the connection needs
- For reporting, use read privileges on the reporting schema rather than global privileges.
- For an application maintenance account, grant only the tables and actions required by the maintenance task.
- Keep administrative accounts separate from routine Navicat connections.
- Remove obsolete host entries and rotate passwords according to your organization’s policy.
The account’s privileges determine what appears usable after login. A connection can succeed while a database, table, or statement is refused because the account does not have permission for it.
Step 4: Open the correct network path
Confirm the MySQL listener and firewall rules
MySQL’s conventional port is 3306, but the configured listener may be different. The server firewall, cloud security group, and any upstream network firewall must allow inbound traffic from your approved source address to that port. A rule that allows the wrong port, the wrong source range, or only an internal network will produce a transport failure before MySQL can evaluate credentials.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Navicat’s troubleshooting guidance recommends checking the hostname, port, firewall and security-group rules, source IP, and whether the server is restricted to localhost. Use the administrator’s supplied hostname rather than substituting an address from an unrelated environment. Confirm that DNS resolves to the intended server before changing any account settings.
Check for localhost-only configuration
A MySQL instance bound only to the loopback interface accepts local connections on the server but cannot accept a direct connection from your computer. The administrator must configure an appropriate listening interface and firewall policy, or provide an SSH tunnel. Do not expose a database listener publicly merely to work around a localhost-only setting without reviewing the security design.
When direct TCP is blocked: configure an SSH tunnel
Hosting companies and network administrators commonly permit SSH while blocking outside access to the MySQL port. Navicat describes SSH tunneling as a way to connect when the database port is blocked by a firewall. The tunnel carries Navicat’s database traffic through an SSH session; the database port does not need to be publicly reachable from your desktop.
- Open the saved MySQL connection’s settings and enable Use SSH tunnel.
- Enter the SSH server host and SSH port. Port 22 is common, but use the port supplied by the administrator.
- Enter the SSH username.
- Choose password authentication or private-key authentication and provide the required credential. Keep private keys protected and use the key format accepted by your Navicat edition.
- In the MySQL connection’s General tab, set the database host to a name or address that the SSH server can reach. For many installations this is an internal hostname or
127.0.0.1from the SSH server’s perspective; use the value supplied by the administrator. - Keep the MySQL port set to the database listener’s actual port as reached from the SSH server.
- Save and test the connection. Navicat should establish SSH first and then open the MySQL session through the forward.
The key distinction is routing: with a tunnel, the database sees the SSH server as the network origin. The MySQL account’s host rule therefore has to match the source address used by that server or by the forwarding arrangement, not necessarily your home or office public IP. Confirm this detail with the database administrator.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Navicat’s hosting guidance explains the SSH-tunnel workflow here: Navicat Help Center: accessing a hosted remote database.
Choose the connection method that fits the server
Direct TCP, SSH tunneling, HTTP tunneling, and SSL/TLS solve different problems. SSH and HTTP tunneling change how traffic reaches the server; SSL/TLS encrypts and authenticates the database protocol and can be combined with a reachable TCP path or a tunnel.
Recommended Free Tools
| Method | Database port publicly reachable? | Server-side requirement | Credentials used | Firewall compatibility |
|---|---|---|---|---|
| Direct TCP/IP | Yes, from the approved client network | MySQL listener, firewall/security-group rule, and account host pattern must allow the client | MySQL username and password | Works when the MySQL port is allowed end to end |
| SSH tunnel | No; the SSH server forwards the connection | SSH access and a database host reachable from that SSH server | SSH password or private key, plus MySQL credentials | Useful when SSH is allowed but outside MySQL access is blocked |
| HTTP tunnel | No direct MySQL exposure is required | An HTTP-tunnel service or endpoint supported by the server and Navicat setup | Method-specific tunnel credentials plus MySQL credentials | Can fit environments that permit HTTP while restricting database ports |
| SSL/TLS over the selected path | Depends on the underlying TCP or tunnel path | Server certificate/CA policy and matching Navicat SSL/TLS settings | MySQL credentials, with certificates when required | Protects the database session but does not by itself open a blocked port |
Navicat for MySQL lists SSH, HTTP Tunnel, and SSL/TLS among its secure connection methods. Select the option supported by the server’s policy rather than enabling an option that has no corresponding server configuration. Feature details are summarized in Navicat’s MySQL feature matrix.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Configure SSL/TLS when the server requires it
Some organizations require encrypted MySQL sessions even on private networks. In Navicat, open the connection’s SSL/TLS settings and supply the certificate or CA information specified by the administrator. The server’s certificate policy controls whether Navicat must validate a CA, present a client certificate, or use another TLS setting.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
SSL/TLS is not a substitute for account permissions or firewall rules. A certificate can be valid while the account is still denied, and a correctly configured TLS client cannot connect when the underlying host and port are unreachable. Test the selected TLS mode against the same host and port that the administrator documented.
Troubleshoot a Navicat remote MySQL connection
Navicat cannot reach the server
- Confirm DNS resolves the intended database hostname from the client network.
- Verify the TCP port with the administrator; do not assume 3306.
- Check local, server, cloud security-group, and upstream firewall rules for the client’s current public IP.
- Confirm the server is listening on a reachable interface rather than localhost only.
- If the database is hosted behind a provider firewall, ask whether direct access is blocked and whether SSH tunneling is supported.
These symptoms indicate a transport problem. Changing the MySQL password will not fix a blocked route, closed port, incorrect hostname, or failed SSH handshake.
Free tools Windows power users keep installed
One-click scans. No signup required.
“Access denied” or error 1045
An access-denied response generally means the server was reached but rejected the authentication or authorization request. Check all of the following:
- The username and password are exactly correct, including case where the server treats it as significant.
- The account’s host pattern matches the source address seen by MySQL. With an SSH tunnel, that may be the SSH server’s address.
- The account exists on the intended server and not only on another MySQL instance.
- The requested database privileges were granted to the same user-and-host combination that Navicat is using.
- A recent ISP, VPN, or network change did not alter the client’s public IP.
Do not respond to error 1045 by granting global privileges automatically. Correct the host entry or the narrowly required database grant, then test again.
The tunnel connects but MySQL does not
- Verify that the database host in the General tab is reachable from the SSH server, not merely from your desktop.
- Confirm the forwarded destination port is the server’s actual MySQL port.
- Check whether the SSH account is allowed to forward connections.
- Ensure the MySQL account’s host rule matches the address from which the SSH server reaches MySQL.
- If TLS is enabled, confirm that certificate names and CA settings correspond to the host used inside the tunnel.
The connection worked and then stopped
Start by checking whether your public IP changed. A host-specific MySQL account can stop matching immediately after an ISP lease renewal or VPN change. Also verify that the administrator did not rotate the password, change the listener port, tighten a firewall rule, or remove the account grant. For an SSH setup, test the SSH login separately and confirm that the internal database hostname still resolves from that server.
Security checklist before using the connection
- Allow only known public IP addresses or tightly controlled ranges.
- Grant access to the required schema and operations, not every database on the server.
- Prefer SSH tunneling when policy does not permit public MySQL exposure.
- Use SSL/TLS when required by the server or organizational policy, and validate the supplied CA or certificates.
- Protect Navicat-saved passwords and SSH private keys with the operating system’s access controls.
- Remove temporary firewall rules and test accounts after troubleshooting.
- Document the host, port, tunnel route, account host pattern, and certificate requirements so future network changes can be diagnosed without broadening access.
Reference configuration summary
For a direct connection, Navicat’s General tab contains a friendly name, remote host, actual MySQL TCP port, username, and password. The server must accept traffic from your client address and the MySQL account must authorize that host. For a tunneled connection, add SSH host, SSH port, SSH username, and password or private-key authentication; set the MySQL host to the address reachable from the SSH server. Use the server’s documented SSL/TLS settings when encryption or certificate validation is required.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Navicat’s connection troubleshooting article covers the same failure boundaries—hostname and port, firewall rules, source IP, localhost-only listeners, and account permissions—at Why I cannot connect to my server. The product overview is available at Navicat for MySQL.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
