Tag Info

New answers tagged

8

This is a security antipattern It's not a good idea to let admins see a user's actual password ever. Users often use the same password for multiple sites (against better advice), so it's a moral hazard to allow admins to see user passwords. You don't need to see a user's password to change it. Showing a user's password on screen, especially in a web ...



Top 50 recent answers are included