Revolution pre 2.1 password encryption

- 701 Posts
bennyb Reply #1, 15 years, 2 months ago

Hi,

Are passwords for manager on revolution (before 2.1 release) MD5 or do they also use salt.

I’ve seen that in 2.1 PBKDF2 was added.

Thanks

Ben
- MODX Staff
- 10,725 Posts
opengeek Reply #2, 15 years, 2 months ago

There is no salt pre-2.1—or post 2.1 if modMD5 is the user’s indicated hash_class. The salts are auto-generated for new users in 2.1 that use the new default hashing algorithm provided by modPBKDF2.
Jason Coward
Chief Architect @ MODX
http://www.jasoncoward.com | http://twitter.com/drumshaman | https://github.com/opengeek