Disqus previously used the MD5 algorithm to hash users' emails. A group of Swedes used a dictionary attack to reveal the email addresses (and in many cases identities) of hundreds of Disqus users, many of whom had made right-wing comments(which are taboo across most of the western world). Anyway, I would like to know what hash algorithm Disqus is using now to store users' emails. On their website, they said that they stopped using MD5, but they didn't say what hash algorithm they changed to. I am researching Disqus for an assignment, so that's why I want to know this.

  • 4
    Why not just ask them?
    – blunders
    Commented May 19, 2015 at 13:40

1 Answer 1


The hash was created by Gravatar, not Disqus and it appears that Gravatar is still using MD5 to create user lookup IDs; meaning the intent of this implementation is to make it easy to create, store and lookup users, not hide who the user is. Also appears that Disqus still supports Gravatar; meaning MD5 is still the hash being used.

Not the answer you're looking for? Browse other questions tagged .