7 ms·
I sort of wish companies would not have employees passwords. Hashing should be standard practice.
by ollifi 4y ago
I sort of wish companies would not have employees passwords. Hashing should be standard practice.
- ovi256 4y agoIt must be, but publishing old passwords can still be done by saving the old cleartext password on password change.
- BeFlatXIII 4y agoAs in store "old password" as cleartext on its final use?
- macintux 4y agoYes, that was my initial thought on how to make this possible. In my case, the company where I contract has a dedicated application (on Mac, at least) for password changes: record the old password and share it once the new password has taken effect.
- dotancohen 4y agoThe last password, to be posted, could be stored in plain text on the password change form submit action. Before that it is only ever committed to permanent storage as a hash.