Thanks for the reply.
There is another plug-in provided?
Thanks
Not really... You CAN use the normal password plugin with some adaptation IF you change the encryption method used in hMailServer... NOT a job for the beginner - if you have more than 2 accounts on the server
hMailServer uses SHA256 as default but these options are available:
PreferredHashAlgorithm - This setting allows you to specify which hashing algorithm hMailServer should use for passwords in the hMailServer database. In old versions of hMailServer, passwords were stored in plain text. In hMailServer 4, passwords were stored in MD5. In hMailServer 5, the default preferred hash is now salted SHA256. The following values are valid for this setting:
0 - None. Store passwords in clear text. This is not recommended.
1 - Blowfish. Store passwords encrypted using Blowfish. This is not recommended, since the password used for encryption is known. Hence, this is no more safe than option 0.
2 - MD5. Store passwords in MD5 hash. This is only recommended to preserve backwards compatibility if you have application which integrates with the hMailServer database.
3 - SHA256 - Store passwords in SHA256 hashes. This is currently the recommended option which gives the highest level of security.If you are using SHA256, this is the way to store new passwords. NOTE; YOU CANNOT REVERSE IT TO SEE PASSWORD!
1. Generate 6 character random string containing characters 0-9, A-F (hex string). This is SALT.
2. Create a new string, TEMP containing SALT + users password.
3. Generate SHA256 hash for TEMP. This is the HASH.
4. In the database, store the string SALT + HASH in the password column.
