ATTENTION: All Members Urged to Change Passwords

mass emailing everyone, right about meow.

Anyone know how the passwords were stored in the database? Were they hashed, and if so what algorithm was used? Would like to know how safe my info is.

Originally Posted by speaktorob

Anyone know how the passwords were stored in the database? Were they hashed, and if so what algorithm was used? Would like to know how safe my info is.

Yes, they're hashed. The actual form is

md5(md5(password).salt)

with . meaning concatenation; salt is a 3-character sequence assigned randomly for each user during registration.

There is no way for anyone to find any member's password by downloading any file on our site or having database access. Everything just looks like a random string of numbers. Your passwords are safe, this was done as a security measure and it makes sense to not use the same password as any poker site anyway.