TYPO3 security

Login, passwords and MFA

12 of 60 questions in the app

Password hashing

  1. How does TYPO3 store the passwords of backend and frontend users? Easy
  2. Which hash algorithm is the default for user passwords in TYPO3 14? Easy
  3. Why is MD5 unsuitable for passwords? Easy
  4. What is a salt used for when hashing passwords? Easy
  5. What can even the best hash algorithm not prevent? Easy

Password policies

  1. How many characters does TYPO3's default password policy require at least? Easy
  2. Which rule belongs to TYPO3's default password policy? Easy
  3. May the password policies be disabled on a production server? Easy

Password hashing

  1. What happens to existing password hashes when an administrator changes the hash algorithm? Medium
  2. Which accounts keep their old hashes permanently after a change of the hash algorithm? Medium

Password hashing

  1. A dump of the table be_users with Argon2id hashes has leaked. Which assessments are correct? Hard
  2. An old instance still has hashes with the prefix $P$ (phpass). Which steps lead best to Argon2id? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications