The salt module allows for Drupal passwords to be 'salted' - an internal string is appended to the password prior to storage - making them less prone to dictionary attacks, rainbow tables and the like.
This module currently stores the salted password in the database. Consequently, disabling this module or changing the salt at any time will require users with salted passwords to recover their passwords.
Furthermore, Drupal by default includes the password for newly registered users within the welcome e-mail. It is recommended that the welcome e-mail template be edited to remove this (unsalted) password. The user will be able to use the one-time login link and select his own (salted) password.
Note: Drupal7 has greatly improved password storage. This module will likely be unneeded in the future.
Downloads
Recommended releases
Development releases
Project Information
- Maintenance status: Seeking new maintainer
- Development status: No further development
- Module categories: Security, User Access & Authentication
- Reported installs: 181 sites currently report using this module. View usage statistics.
- Last modified: January 18, 2011
