Passwords encrytion
General questions and topics about hsnm

Rate this topic
   Post Reply
6 posts   •   Page 1 of 1
CIE
Posts: 46
Joined: 29 Jun 2017, 13:17

Passwords encrytion

by CIE » 23 Sep 2021, 15:14

Hello,
We have enabled password encryption in the system but we see that the user creation confirmation emails are still sent as plain text. Is there no way to correct this?

Thanks.

HSNMSupport
Posts: 1553
Joined: 26 Jul 2016, 09:16

Re: Passwords encrytion

by HSNMSupport » 23 Sep 2021, 15:19

Hi,
the passwords are encrypted at the DB level, but in case you print the user card or send the credentials via email, the password is decrypted.
Have a nice day.

CIE
Posts: 46
Joined: 29 Jun 2017, 13:17

Re: Passwords encrytion

by CIE » 23 Sep 2021, 17:02

Hello,
But then, what is the use of the option to encrypt the password? it does not imply any type of security. The ideal is to store the passwords irreversibly with some hashing algorithm...

HSNMSupport
Posts: 1553
Joined: 26 Jul 2016, 09:16

Re: Passwords encrytion

by HSNMSupport » 23 Sep 2021, 17:07

The idea is to increase security, and if for some reason data are stolen, the passwords are secured and not clear.

CIE
Posts: 46
Joined: 29 Jun 2017, 13:17

Re: Passwords encrytion

by CIE » 23 Sep 2021, 17:16

The idea is to increase security, and if for some reason data are stolen, the passwords are secured and not clear.
But they can still be stolen when printed or sent

HSNMSupport
Posts: 1553
Joined: 26 Jul 2016, 09:16

Re: Passwords encrytion

by HSNMSupport » 23 Sep 2021, 17:19

If you decide to send it via email or SMS, the password is sent in clear and we have nothing that can be done.
Please disable the credentials sending if you require it.

Rate this topic

Who is online

Users browsing this forum: No registered users and 8 guests

It is currently 21 Nov 2024, 16:00