VGChartz got attacked [IMPORTANT]

[trunkswd]

Imaginedvl said:

trunkswd said:

Passwords are all encrypted. But yes, we will look into adding 2FA. 

Passwords are encrypted or you are saving just a hash (so people cannot reverse it back to the actual password even if they have access to the database)? 

Encyrpting passwords are not really safe... Most website, servers are not doing that anymore which is the reason why you cannot really "receive" your password but just reset it.

And on VGChartz, there is really no reason to need to have our password encrypted instead of just the hash.

Zkuq said:

trunkswd said:

Passwords are all encrypted. But yes, we will look into adding 2FA. 

I hope what you really mean is hashed instead of encrypted, but either way, at least it's not plain text.

Anyway, thanks for working to sort this out! I imagine this is a bit of a sticky situation and this is probably all (or mostly?) essentially volunteer work, so I really appreciate the work put into fixing things.

I just asked as I am not sure about how this whole thing works. JLauro says the passwords are hashed and not encrypted.