Answers to: Database password encryption

Comment by Reto Weiss on Reto Weiss's answer

Reto Weiss — Fri, 24 Jun 2016 08:16:41 -0400

Hi Yes there is, the passwords will be automatically migrated the first time you start 6.2.

Comment by Genzer Hawker on Reto Weiss's answer

Genzer Hawker — Fri, 24 Jun 2016 04:30:06 -0400

Hi Reto

Is there any strategy to migrate existing users with old passwords from pre-6.2 to 6.2?

Answer by Reto Weiss

Reto Weiss — Fri, 31 Jul 2015 09:00:54 -0400

Before 6.2: The password is encrypted using a non standard alghorithm. It is not possible to change the alghorithm used for encrypting passwords at the moment.

After 6.2: We use state of the art standard algorithms to encrypt passwords. For user passwords bcrypt is used to hash the password. For passwords used in external database, web services etc. we use AES.