Security · Question 5 of 12
How does TYPO3 v14 store the passwords of backend and frontend users?
1 answer is correct. Easy
Show answer
Answer
- C As a hash using a deliberately slow algorithm, Argon2id by default
Explanation
A password hash is a one-way function: the password cannot be calculated back from the stored value; at login, only the input is hashed again and compared. By default TYPO3 uses Argon2id, a deliberately compute- and memory-intensive algorithm that greatly slows down attacks with stolen hashes. In the database such a hash starts with $argon2id$. Encryption sounds secure but is wrong here: anything that can be decrypted with a key is lost, key included, in a data breach. MD5 has long been considered unsafe for passwords because it can be computed far too quickly.