Two-Factor Authentication

by Helfertech

Secure your SuiteCRM password and account data by implementing two-factor authentication with Google Authenticator.

Free 30 day trial
Try it Now

#4223 - Unencrypted passwords

Closed Bug? created by 2 years ago

I have been recently been tasked with support of a SuiteCRM database using your 2FA plugin, and I have found that we have plaintext passwords stored in our database under a column ht_auth_password . This clearly constitutes a critical security issue for us. Is this something that will be corrected by an upgrade to the latest version? I want to be able to get the system back online as soon as possible.

  1. saeed member avatar

    Helfertech Provider

    2 years ago

    Hi Niall,

    We have uploaded a new version 5.2 which stores encrypted passwords instead of plaintext. Please download the latest package from the store.

    Thank you.

This case is public. Please leave out any sensitive information such as URLs, passwords, etc.
Saving Comment Saving Comment...
  • Supported Versions
  • 7.0.0 to 8.6.1
Read Our Review

Other add-ons of interest

Glances - Integrate SuiteCRM with all your apps

The simplest way to work™. Glances integrates SuiteCRM with all your favorite workplace apps, acting as your go-to hub for real-time customer insights and personal tasks.

Featured
Administration google authenticator 2fa secure SuiteCRM authentication security security login login 2-way 2-way-login Login Authentication authentication two factor auth barcode scan MFA Multi-Factor Authentication 2 factor authenticator 2-step login verification verification Google 2-Step Verification google sign in Registration code 2-step verification verification codes get verification codes QR code setup setup account unique code sync time Scan QR Code protection otp CRM protect secure login prevent device mobile app device enrollment device registration reset device safe unauthorized access enrollment protection from hacker token-based authentication account user password verify validate valid guarded defendant authenticity authenticated authenticates authenticating