Migrate current password hashing to Argon2id
This commit is contained in:
@@ -11,6 +11,10 @@ Register with:
|
||||
|
||||
Your display name is required ‒ it appears next to all of your suggestions and scores.
|
||||
|
||||
### How are passwords protected?
|
||||
|
||||
Passwords are never stored in plain text. Pick'n'Play stores salted, versioned password hashes. New and upgraded hashes use Argon2id, while older hash versions are transparently upgraded after successful sign-in or admin-password confirmation.
|
||||
|
||||
### Do I need admin privileges?
|
||||
|
||||
If you've been given an **admin key**, enter it during registration. If the key is invalid, the request is rejected.
|
||||
|
||||
Reference in New Issue
Block a user