Changes
Page history
Add information about short hashes setting
authored
Jul 04, 2021
by
Marius David Wieschollek
Show whitespace changes
Inline
Side-by-side
Administrators/App-Settings.md
View page @
76b618aa
...
...
@@ -162,7 +162,7 @@ Send emails when a password was shared with an user.
These settings can be overwritten by the user.
#### Security Check Hash
This setting defines which percentage of the SHA-1 hash used to compare each password against a list of known
ba
d passwords should be stored.
This setting defines which percentage of the SHA-1 hash used to compare each password against a list of known
compromise
d passwords should be stored.
If your server is compromised, an attacker could use the SHA-1 hash to find the plain text value of a compromised password.
Storing a partial hash can reduce this risk, but also means that passwords may be marked as compromised despite being secure.
Storing no hash will prevent the password security check and the duplicate check from working.
...
...
...
...