Date: 06 8, 2001 3:37:23 PM

# Encrypted Passwords

## Password encryption

For security reasons, administrators are encouraged to encrypt their passwords.

This is done by setting the cvar encrypt_password in the `adminmod.cfg` configuration files.

To encrypt a password, go to the Adminmod/tools directory, and use the command line encrypt executable provided there.

## The command

`encypt password`

Will output a unix crypt of the password argument. If you wish to use MD5 sums (dependant on the encrypt_password setting) you should use the -m argument before the password when you run the command as exemplified below

`encrypt -m password`

Will output the MD5 hash of the password argument.

## What to put where

- Put the Encrypted version of the password in the `user.ini` file.

- Use the plaintext version of the password from the client machine, either with the admin_login command from the client setup configuration file.

This pattern allows the user to be in control of their password. The password is only ever used from the client machine and the server is not aware of the full password. Should the server be compromised it would not be possible to harvest user passwords maintaining the security of their passwords.