During installation, Microsoft SQL Server is set to either Windows Authentication mode or Mixed Mode (Windows Authentication and SQL Server Authentication) . If you select Mixed Mode, you must enter and confirm the SQL Server system administrator (sa) password.
Windows Authentication Mode
When a user connects through a Microsoft Windows user account, SQL Server validates the account name and password using information in the Windows operating system. This is the default authentication mode, and is much more secure than Mixed Mode. Windows Authentication uses Kerberos security protocol, provides password policy enforcement in terms of complexity validation for strong passwords, provides support for account lockout, and supports password expiration.
Mixed Mode (Windows Authentication and SQL Server Authentication)
Enter and confirm the system administrator (sa) password when you choose Mixed Mode authentication. Setting strong passwords is essential to the security of your system. Never set a blank or weak sa password.
Selecting an Authentication Mode
Microsoft’s best practice recommendation is that you use Windows authentication mode whenever possible.