Hi everyone,
may i know in which format the user account and password that used to login to grafana is stored in grafana database? Is it plain text , encrypted or hash?
It is hashed and salted.
We use PBKDF2 from this golang package. For login, we also have a guard for time based attacks.
Code is here: https://github.com/grafana/grafana/blob/master/pkg/util/encoding.go
Thank you danielleeā¦