Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If the passwords were encrypted is there really a problem?

I have not used the forum for some time and can't remember the details.

Advice please.

share|improve this question
You can get detailed answer, if you ask this question at Information Security – saji89 Jul 24 '13 at 4:31

Even if the passwords are encrypted the PCs these days have become powerful enough to use bruteforce attack on the hash to find the passwords within reasonable time. I myself don't remember the forum password I used to use. So to be on the safer side, it would be prudent to change the password in websites where you feel that you've used the same password.

Canonical in its statement on the Ubuntu forums home page, has told:

The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.

The use of salt will make it more difficult to find the password from the hash, but still it'll be safer to change the password, wherever required. To know more about Salt, please check out: Salt (cryptography)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.