Quote

...
To enable the user to connect with no password, include no IDENTIFIED BY clause:

CREATE USER 'jeffrey'@'localhost';

In this case, the account uses built-in authentication. Clients must provide no password when they connect.

However, an account with no password is insecure. To avoid this, use SET PASSWORD to set the account password.
...