Passwords on Autism Forums

[tazz]

Are they stored in an encrypted state using a secure algorithm?

@Satal

@Nitro

 

[Satal]

They are salted and hashed. They are NOT stored in plain text or a reversible format

 

[Tom]

They are salted and hashed.

 

[The_Walrus]

Hi, apparently I was wrong about WrongPlanet passwords.
While they are salted and hashed, the issue is that they can be overwritten by administrators.
The WrongPlanet hacker does not have access to users' old passwords, but can write new passwords to gain access to the account.

 

[tazz]

Well, that makes a lot more sense. Even a poor website would hash passwords before storing them.

 

[Mona Pereth]

Well, that makes a lot more sense. Even a poor website would hash passwords before storing them.

You'd be surprised at some of the sites/apps that ought to hash passwords but don't. For example, I am aware of at least one electronic medical records system that stores passwords in plain text, even though that's a clear violation of HIPAA.