All Questions
Tagged with passwords password-reset
2 questions with no upvoted or accepted answers
2
votes
0
answers
204
views
Admin able to set new plaintext user password - security problem?
I am working on this application that can be deployed and run by anyone on their server. Most often, it is run as a web service. In our new version, we removed the possibility for admins to set and ...
0
votes
0
answers
109
views
How could one use multi-factor authentication to derive a static secret key?
Scenario:
The setup is that each user has a randomly generated key A used for encrypting data stored on the server and a password-derived key B used to store A on the server without the server getting ...