Password Encryption

[Vishal Kumar, geändert vor 11 Jahren.]

Is all user passwords is stored encrypted using salted SHA1 in liferay?

[jelmer kuperus, geändert vor 11 Jahren.]

The encryption used is determined by the passwords.encryption.algorithm property
By default it uses unsalted sha iirc, which is not very secure

[Vishal Kumar, geändert vor 11 Jahren.]

jelmer kuperus:

The encryption used is determined by the passwords.encryption.algorithm property
By default it uses unsalted sha iirc, which is not very secure

Then in that case, How can i achieve Salted SHA1 algorithm.

[jelmer kuperus, geändert vor 11 Jahren.]

Add

passwords.encryption.algorithm=SSHA

to your portal-ext.properties

using bcrypt might be even better

[Vishal Kumar, geändert vor 11 Jahren.]

jelmer kuperus:

Add

passwords.encryption.algorithm=SSHA

to your portal-ext.properties

using bcrypt might be even better

Thanks a lot jelmer