3 ms·
Use bcrypt or scrypt to store the passwords. Don't use plain SHA1 or MD5, etc. If you must use SHA1 or MD5 (for whatever reason), iterate and salt them. Edit:
by 16s 16y ago
Use bcrypt or scrypt to store the passwords. Don't use plain SHA1 or MD5, etc. If you must use SHA1 or MD5 (for whatever reason), iterate and salt them.
Edit: Re-reading, I may have mis-understood your question. You want to be able to decrypt and view their plain-text passwords yourself? Is that what you mean when you say "easy for me to decrypt". If that's the case and you need to decrypt it later (on their behalf) disregard my suggestions.
- perssontm 16y agoYes, I will need the passwords in clear text when doing logins later. I was thinking about storing the password as cram-md5, but that will require the server to support that. http://www.inter7.com/courierimap/INSTALL.html#crammd5 http://www.inter7.com/courierimap/INSTALL.html#crammd5