Encrypted Passwords

Password encryption

 

For security reasons, administrators are encouraged to encrypt their passwords.

This is done by setting the cvar encrypt_password in the adminmod.cfg configuration files.

To encrypt a password, go to the Adminmod/tools directory, and use the command line encrypt executable provided there.

 

The command

encypt password

 

Will output a unix crypt of the password argument. If you wish to use MD5 sums (dependant on the encrypt_password setting) you should use the -m argument before the password when you run the command as exemplified below

 

encrypt -m password

 

Will output the MD5 hash of the password argument.

 

What to put where

 

This pattern allows the user to be in control of their password. The password is only ever used from the client machine and the server is not aware of the full password. Should the server be compromised it would not be possible to harvest user passwords maintaining the security of their passwords.