Password hashing · Question 12 of 12
An old instance still has hashes with the prefix $P$ (phpass). Which steps lead best to Argon2id?
2 answers are correct. Hard
Show answer
Answer
- A Delete accounts that are no longer used because they are never converted
- D Set Argon2id as default and let hashes be converted on login
Explanation
A hash cannot be converted into another one; the plain text password is missing. TYPO3 raises hashes on login. Removing phpass before all are converted locks these users out.