Question
How are user passwords are protected? What are the security features in TeamForge?
Answer
Teamforge user passwords are encrypted using the SHA-512 Hashing algorithm. From UI or DB, one cannot directly view the user passwords. For example, the SQL query below shows the user password field is encrypted when queried for the Postgres Database:
select username, password from sfuser where username='<username>';
admin | $6$rounds=10000$SRbyoCkJNtebfMUH$LcruCBC.YKr4ihhH73bJyh5ui25SscGkkuKWoNzBxfkhj
17p/BNkDnkYy224HqYIdd/0kXrxEkClmqApQQrzm/
For more information, please see What are the security features available in TeamForge.
Internal reference: #19645
Comments
Please sign in to leave a comment.