Password encryption

Etan Reisner deryni at pidgin.im
Mon Mar 17 11:25:00 EDT 2008


On Mon, Mar 17, 2008 at 07:57:14AM -0400, Venkatasamy,Venkat wrote:
<snip>
> i would like to hash the password so it should not be visible even to
> the user who stores the password.

Hashing the password doesn't make it not visible to people, it just makes
the hash visible instead of the plaintext version, but the hashed version
is good enough to log in to the account anyway. You would just need to
stick it into your own copy of pidgin's accounts.xml file on your local
machine and click Enable. Similarly, it is trivial to modify pidgin to
print out the unhashed version of the password instead of using it (or to
rip out the unhashing code from pidgin and run it yourself).

    -Etan




More information about the Support mailing list