# What hashing is used on the automatic user source passwords?

**URL:** <https://forum.inductiveautomation.com/t/what-hashing-is-used-on-the-automatic-user-source-passwords/28317>\
**Category:** Ignition\
**Tags:** ignition79\
**Created:** [September 17, 2019, 4:01pm UTC](https://forum.inductiveautomation.com/t/what-hashing-is-used-on-the-automatic-user-source-passwords/28317 "2019-09-17T16:01:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![salbrechtsen](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/salbrechtsen/32/18660_2.png) [@salbrechtsen](https://forum.inductiveautomation.com/u/salbrechtsen)\
**Post date:** [September 17, 2019, 4:01pm UTC](https://forum.inductiveautomation.com/t/what-hashing-is-used-on-the-automatic-user-source-passwords/28317/1 "2019-09-17T16:01:23Z")

</div>

I’ve seen an old post from 2015 that says SHA1 but also some hinting at MD5? What is being used to hash passwords in Ignition 7.9.9?

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [September 17, 2019, 4:24pm UTC](https://forum.inductiveautomation.com/t/what-hashing-is-used-on-the-automatic-user-source-passwords/28317/2 "2019-09-17T16:24:20Z")

</div>

Hi @salbrechtsen -

Looks like we have a mix of things going on:

Internal User Source:  
SHA-256 (with support for MD5, which is likely what some user passwords were hashed with in the past before we started using SHA-256)

DB Automatic User Source:  
SHA-1

---

<div class="post-metadata">

**Author:** ![salbrechtsen](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/salbrechtsen/32/18660_2.png) [@salbrechtsen](https://forum.inductiveautomation.com/u/salbrechtsen)\
**Post date:** [September 17, 2019, 7:46pm UTC](https://forum.inductiveautomation.com/t/what-hashing-is-used-on-the-automatic-user-source-passwords/28317/3 "2019-09-17T19:46:25Z")

</div>

Thank you!

---

<div class="post-metadata">

**Author:** ![yehet73190](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/yehet73190/32/68157_2.png) [@yehet73190](https://forum.inductiveautomation.com/u/yehet73190)\
**Post date:** [February 24, 2023, 11:32pm UTC](https://forum.inductiveautomation.com/t/what-hashing-is-used-on-the-automatic-user-source-passwords/28317/4 "2023-02-24T23:32:53Z")

</div>

Is this still what's being used for Ignition 8.1.3?

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [February 24, 2023, 11:45pm UTC](https://forum.inductiveautomation.com/t/what-hashing-is-used-on-the-automatic-user-source-passwords/28317/5 "2023-02-24T23:45:53Z")

</div>

Yes.