Larion Studios forum stores your passwords in unhashed plaintext. Don't use a password there that you've used anywhere else.

you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 2 years ago* (last edited 2 years ago) (13 children)

But that still means they had your plaintext password at some point.

Edit: which, as some replies suggest, may not actually be much of an issue.
I'm still skeptical about them returning it, however.

  • source
  • parent
  • hideshow 13 child comments
  • [–] 15 points 2 years ago* (5 children)

    hashing on client side is considered a bad idea and almost never done.
    you actually send your password "in plain text" every time you sign up.

  • source
  • parent
  • hideshow 5 child comments
  • [–] -4 points 2 years ago (3 children)

    It's not a bad idea and it is often done, just not in a browser/webapp context.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 2 years ago (5 children)

    Of course. You receive the password in plain on account creation, do the process you need, and then store it hashed.

    That's fine and normal

  • source
  • parent
  • hideshow 5 child comments
  • [+] 5 points 2 years ago (4 children)
  • [–] 5 points 2 years ago (3 children)

    When you create an account you type your password in. This gets sent to the server, and then it is hashed and stored

    So there is a period of time where they have your unhashed password

    This is true of every website you have ever made a password on

  • source
  • parent
  • hideshow 3 child comments