How is password encryption handled on Libertex?

Password encryption ensures that user passwords are stored securely using cryptographic methods rather than in a readable form. When a user creates or updates their password, the platform does not store the actual password itself. Instead, it applies an advanced cryptographic process known as hashing and 'salting', which transforms the password into a complex, irreversible string of characters. This means that the password exists in readable form only during the brief moment the user types it. Once processed, only the encrypted version is retained on the platform's servers.

The hashing process typically incorporates additional security techniques to further strengthen password protection. Salting, for example, adds a unique random value to each password before it is hashed, ensuring that even if two users choose the same password, their stored hashes will be completely different. This prevents attackers from using precomputed tables of common password hashes, known as rainbow tables, to reverse-engineer passwords in bulk. Modern hashing algorithms are also designed to be computationally intensive, meaning that even with significant processing power, attempting to crack a hashed password through brute force would require an impractical amount of time and resources.

This approach to password security means that even in the highly unlikely event of a server breach, the actual passwords of users remain unreadable and secure. Attackers would only obtain encrypted hashes that are extremely difficult to convert back into usable credentials. However, password encryption on the platform's side is only one part of the equation. Users play an equally important role when choosing a password. The Company strongly advise using a long, unique passphrase (a memorable sentence or series of words) rather than a short, complex password, and never reusing credentials from other websites. Changing passwords periodically and enabling two-factor authentication provide additional layers of protection that complement the platform's encryption measures and create a robust overall defence for the account.