Post #2499554
2026-05-06 12:34 UTC
@SuperSluether@tech.lgbt The only safe way I can think of is checking the next time the user enters their password, but if it checked that overnight... I'd probably get very suspicious :neocat_nervous:
Replies (1)
-
@SuperSluether@tech.lgbt 2026-05-06 12:36
@kianga@fedi.tail.ooo I know for passwords that were set before it was installed, it can only check the hash and match against that. But for passwords set since it was installed, it definitely seems to know what they are… unless it just kept track of “this password is 8 characters long and has uppercase, lowercase, numbers, and symbols”