A developer wants to store customer passwords ‘so support can decrypt them if the customer forgets.’ Which design should you reject that sentence for?

Explain cryptographic solutions

AStore an adaptive hash such as Argon2, and offer a reset flowBEncrypt the passwords with a key the app can use, so support can read them backCRefuse to email the current passwordDRate-limit the login form

Pick an answer. You’ll see if it’s right. The longer explanation is what a plan opens.

Why

Nearby items

1.4 · You must encrypt 40 GB of disk images before they go to an offsite shelf. A colleague suggests encrypting each…
4.6 · Attackers are relaying one-time codes from your SMS logins in real time, and a few employees have had SIM swap…

28 items in the public index.