Reply To: Forums software issue: password vulnerability

#7833
Jeff Roberts
Keymaster

This means the password is stored in clear text in the database

This is not true.

We are looking into the issue of e-mailing you your password in plain text, but I can tell you, the passwords are not stored in plain text. I have access to the database and I cannot see anything.

It’s good practice to not reuse passwords anyway, those who do are at risk no matter where they’re creating them.

I recommend 1password. I can’t live without it!