Open Karmastic opened 1 week ago
[From Indy]
Store as "HASH:" when hashed. If not hashed, prompt to create new pwd after non-hashed pwd validated. Use proper domain scoping and user's name (lower-cased, whitespace-trimmed) as prefix before hashing.
[From Indy]