Creating a separate user for the WordPress database is a good security practice. This user has specific privileges only on the WordPress database and no other. This limits the potential damage in case the user’s credentials are compromised.