3 ms·
Credentials are encrypted with passphrase and seamlessly stored on the server by token=sha256(passphrase). https://truefactor.io/ https://truefactor.io/
by homakov 11y ago
Credentials are encrypted with passphrase and seamlessly stored on the server by token=sha256(passphrase). https://truefactor.io/ https://truefactor.io/
- valarauca1 11y agoSite gives me a login page. I make a login and I get no information about the service just user options. Also where is the salt stored? SHA256 is pretty easy to brute force even salted.
- homakov 11y agoEmail itself is salt (or rather public part of passphrase). So from email+passphrase encryptionKey is derived using scrypt. So it's actually sha(scrypt(email+passphrase))