Issue
- The default password encryption algorithm is "PBKDF2WithHmacSHA1/160/128000
- If you want to change to SHA-256, is the following setting correct?
- If I make a change, how will the passwords of existing users be handled?
Environment
- DXP 7.1, DXP 7.2, DXP 7.3, DXP 7.4
Resolution
- You can change the password encryption algorithm with the following properties
- passwords.encryption.algorithm=SHA-256
- The following algorithms are supported
- passwords.encryption.algorithm=BCRYPT/10
passwords.encryption.algorithm=MD2
passwords.encryption.algorithm=MD5
passwords.encryption. algorithm=NONE
passwords.encryption.algorithm=PBKDF2WithHmacSHA1/160/720000
passwords.encryption.algorithm=SHA
passwords.encryption. algorithm=SHA-256
passwords.encryption.algorithm=SHA-384
passwords.encryption.algorithm=SSHA
passwords.encryption.algorithm=UFC-CRYPT
- passwords.encryption.algorithm=BCRYPT/10
- For existing users,the previous algorithm is used until the password is changed