If you haven’t logged in since 2021, reset your password

Old passwords, new hashes FreshPorts has stored user passwords as bcrypt hashes since April 2021. Yet most of the hashes in the production database were still MD5-crypt. This post covers why, what I did about it, and two bugs found along the way. How the hashes get upgraded Passwords are hashed in the database with

If you haven’t logged in since 2021, reset your password Read More »