Wednesday, May 22, 2019

Google Notifying Administrators About Unhashed Password Storage

Smooth move Google, smooth move.

We made an error when implementing this functionality back in 2005: The admin console stored a copy of the unhashed password. This practice did not live up to our standards. To be clear, these passwords remained in our secure encrypted infrastructure. This issue has been fixed and we have seen no evidence of improper access to or misuse of the affected passwords.