Skip to main content
Level 2
Feb 21, 2023 12:07 PM UTC
Solved

Protected password storage

Hi all! I have Adobe Campaign Classic (version 9032) installed, does anyone know if all end-user passwords are protected by a hash with a random value (salt) using a strong hashing algorithm (e.g. SHA-256)?

Thank you very much!!

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
akshaaga
akshaagaAccepted solution
Adobe Employee
Feb 21, 2023 12:25 PM UTC

Hi @robertocervantes,

In ACC, passwords are hashed with the SHA-256 algorithm and a unique salt value. This helps to protect user passwords from being compromised in the event of a security breach.

Adobe Campaign Classic also supports other password security measures, such as setting password complexity requirements and password expiration policies.

4 replies

akshaaga
Adobe Employee
akshaagaAdobe EmployeeAccepted solution
Adobe Employee
Feb 21, 2023 12:25 PM UTC

Hi @robertocervantes,

In ACC, passwords are hashed with the SHA-256 algorithm and a unique salt value. This helps to protect user passwords from being compromised in the event of a security breach.

Adobe Campaign Classic also supports other password security measures, such as setting password complexity requirements and password expiration policies.

Translate
Level 2
Feb 21, 2023 3:20 PM UTC

Great!! Many thanks @akshaaga  

Translate
Ganesh5067
Level 2
Feb 21, 2023 6:50 PM UTC

Yes, Adobe Campaign Classic (version 9032) protects end-user passwords with a hash that includes a random value (salt) using a strong hashing algorithm, such as SHA-256. The hashed passwords are then stored in the Adobe Campaign database.

When a user creates or updates their password, the password is first hashed using the selected algorithm and salt. The resulting hash value is then stored in the database, while the original password is discarded.

When a user attempts to log in, the entered password is hashed using the same algorithm and salt as the stored hash. If the resulting hash matches the stored hash, the user is granted access. If the hashes do not match, the user is denied access.

This hashing mechanism provides an additional layer of security to protect end-user passwords from unauthorized access, even if the database is compromised. It is recommended that users choose strong, unique passwords and that passwords are periodically changed to maintain the security of the system.

Translate
Level 2
Mar 2, 2023 11:50 AM UTC

Ok thank you very much for the information!!!! 🙂 

Translate