I want to easily recover user passwords if required. I hash them using bcrypt but I tried to backup non-hashed passwords into a plain text file (*txt) not accessible over the internet. Is that correct and secure?
I'm using a secure password for VPS remote desktop. I don't think there's any way it could be grabbed, but just wondering this is even a correct approach?