Archive for March, 2011

Password Security

Tuesday, March 8th, 2011

Is your password safe here? Yes, it is.

Passwords on this site are never stored or transmitted in plain text, as long as you allow javascript to run on the site.

FairTab uses jCryption to create unique encryption keys each and every time you log in so your username and password are protected before the data leaves your browser.

Internally, the database stores the passwords using a very secure Blowfish cipher with a random salt. In practical terms, it means that even if someone does get into the database, there is no reasonable way to figure out your password. Even the system administrator can not tell what your password is! If you forget your password, a new password can be set up and sent to you, but a forgotten password is lost forever. If a website can email you a forgotten password, it means that someone, somewhere, has access to your password!

Most of the data on this site is handled without encryption since the overhead is not really necessary. However, I take password security and confidentiality seriously and I want you know know that.