HSNM Forum

Hello,
We have enabled password encryption in the system but we see that the user creation confirmation emails are still sent as plain text. Is there no way to correct this?

Thanks.

Hi,
the passwords are encrypted at the DB level, but in case you print the user card or send the credentials via email, the password is decrypted.
Have a nice day.

Hello,
But then, what is the use of the option to encrypt the password? it does not imply any type of security. The ideal is to store the passwords irreversibly with some hashing algorithm...

The idea is to increase security, and if for some reason data are stolen, the passwords are secured and not clear.

The idea is to increase security, and if for some reason data are stolen, the passwords are secured and not clear.

But they can still be stolen when printed or sent

If you decide to send it via email or SMS, the password is sent in clear and we have nothing that can be done.
Please disable the credentials sending if you require it.