New 7.1 Password Check Feature

  • Resolved mountainguy2

    (@mountainguy2)


    7 years ago

    Regarding your new feature, checking for passwords used in data breaches. A couple of questions:

    1. Any performance penalty for leaving this switched on (we doubt it’ll help us much after we let it run for a few days)?

    2. We obfuscate and add unique specificity to all our user emails by appending +this-added to them, for example, [email protected] Does that have any effect on this feature?

Viewing 2 replies - 1 through 2 (of 2 total)
  • wfalaa

    (@wfalaa)

    Hi,
    This feature is enabled by default for admins and it will not affect the performance in any way even if you enabled it for all users with “publish post” capability. Please check this blog post to know how this feature was implemented in the plugin with both privacy and performance taken in consideration. (check the “Privacy Improvements in Version 2 of Pwned Passwords” part specifically).

    Appending plus sign to email addresses shouldn’t affect this feature as well.

    Thanks.

    Thread Starter mountainguy2

    (@mountainguy2)

    Thanks for the clarity. MTN

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘New 7.1 Password Check Feature’ is closed to new replies.