Password storage disclosures

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Inappropriate function used to hash passwords but passwords are salted, at least.

Recommended change: Start using “slow” hashes, don't forget to re-hash existing passwords, publish hashing info visibly, then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Unsalted passwords hashed with one iteration of unsuitable function.

Recommended change: Start using “slow” hashes, also re-hash existing passwords if needed, publish hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Inappropriate function used to hash passwords but passwords are salted, at least.

Recommended change: Start using “slow” hashes, don't forget to re-hash existing passwords, publish hashing info visibly, then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Inappropriate function used to hash passwords but passwords are salted, at least.

Recommended change: Start using “slow” hashes, don't forget to re-hash existing passwords, publish hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Unsalted passwords hashed with one iteration of unsuitable function.

Recommended change: Start using “slow” hashes, also re-hash existing passwords if needed, publish hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Unsalted passwords hashed with one iteration of unsuitable function.

Recommended change: Start using “slow” hashes, also re-hash existing passwords if needed, publish hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Unsalted passwords hashed with one iteration of unsuitable function.

Recommended change: Start using “slow” hashes, also re-hash existing passwords if needed, publish hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Inappropriate function used to hash passwords but passwords are salted, at least.

Recommended change: Start using “slow” hashes, don't forget to re-hash existing passwords, publish hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Unsalted passwords hashed with one iteration of unsuitable function.

Recommended change: Start using “slow” hashes, also re-hash existing passwords if needed, publish hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Passwords stored in plaintext, in their original, readable form, or passwords encrypted instead of hashed.

Recommended change: Hash passwords using a “slow” hashing function, publish storage and hashing info visibly, then let me know.

Inappropriate function used to hash passwords but passwords are salted, at least.

Recommended change: Start using “slow” hashes, don't forget to re-hash existing passwords, publish hashing info visibly, then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.

A slow hashing function is used but such info is "invisible", hidden in a blog post or a talk, or on social media.

Recommended change: Publish storage and hashing info details visibly (e.g. in the docs or FAQ), then let me know.