newserv icon indicating copy to clipboard operation
newserv copied to clipboard

Store passwords as hashes instead of plaintext

Open PolarManne opened this issue 10 months ago • 2 comments

Is your feature request related to a problem? Please describe. Currently, passwords for BB and GC are stored on the server in plaintext, which is extremely bad for user security and privacy. While nothing can be done about the fact that they're still sent over the network in the clear, having them stored with some form of encryption would reduce the risk of some malicious actor who's gained access to a server from being able to steal this data.

Describe the solution you'd like Store passwords as a hash, along with adding a command to the server console to reset or change a password should the user in question lose or forget it.

Game version(s) (choose one or more of the following): BB, all GC versions

PolarManne avatar Feb 01 '25 23:02 PolarManne