How are user passwords are protected? What are the security features in TeamForge?
Teamforge user passwords are encrypted using the SHA-512 Hashing algorithm. From UI or DB, one cannot directly view the user passwords. For example, the SQL query below shows the user password field is encrypted when queried for the Postgres Database:
select username, password from sfuser where username='<username>';
admin | $6$rounds=10000$SRbyoCkJNtebfMUH$LcruCBC.YKr4ihhH73bJyh5ui25SscGkkuKWoNzBxfkhj
For more information, please see What are the security features available in TeamForge.
Internal reference: #19645