Skip to content

Commit 78ffb79

Browse files
seanmcmouse
authored andcommitted
man: doveadm-pw - Replace example DIGEST-MD5 with ARGON2ID
1 parent ecb3a1e commit 78ffb79

File tree

1 file changed

+11
-9
lines changed

1 file changed

+11
-9
lines changed

docs/core/man/doveadm-pw.1.md

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,8 @@ configuring Dovecot first, you can use `doveadm -O pw` to do so.
4848
**-p** *password*
4949
: The plain text *password* for which the hash should be generated. If
5050
no *password* was given [[man,doveadm]] will prompt interactively
51-
for one.
51+
for one. (Beware that using this option means the plain text password
52+
will be in your shell history!)
5253

5354
**-r** *rounds*
5455
: The password *scheme* s **BLF-CRYPT**, **SHA256-CRYPT** and
@@ -80,10 +81,10 @@ configuring Dovecot first, you can use `doveadm -O pw` to do so.
8081
specified, [[man,doveadm]] will prompt interactively for one.
8182

8283
**-u** *user*
83-
: When the **DIGEST-MD5** *scheme* is used, also the *user* name must
84+
: When the **DIGEST-MD5** *scheme* is used, the *user* name must also
8485
be given, because the user name is a part of the generated hash. For
8586
more information about Digest-MD5 please read also
86-
[[link,auth_digest_md5]].
87+
[[link,auth_digest_md5]]. For other schemes, this is not required.
8788

8889
**-V**
8990
: When this option is given, the hashed password will be internally
@@ -92,26 +93,27 @@ configuring Dovecot first, you can use `doveadm -O pw` to do so.
9293

9394
## EXAMPLE
9495

95-
A DIGEST-MD5 hash for [email protected].
96+
An ARGON2ID hash (best security at time of this writing, though can be
97+
heavy on a busy server):
9698

9799
```sh
98-
doveadm pw -s digest-md5 -u [email protected]
100+
doveadm pw -s ARGON2ID
99101
``ldas;l;als;las;lkas
100102
```
101103
Enter new password:
102104
Retype new password:
103-
{DIGEST-MD5}9b9dcb4466233a9307bbc33708dffda0
105+
{ARGON2ID}$argon2id$v=19$m=65536,t=3,p=1$AOrrkaFmGxCFtX+NCSHFkg$N3rlzYFqyNkCwrOingnDJ/qDQ09yGHgQa8PQfbu7rIE
104106
```
105107
106-
A CRAM-MD5 hash for [email protected].
108+
Alternatively, a SHA512-CRYPT hash:
107109
108110
```sh
109-
doveadm pw
111+
doveadm pw -s SHA512-CRYPT
110112
```
111113
```
112114
Enter new password:
113115
Retype new password:
114-
{CRAM-MD5}913331d8782236a8ecba7764a63aa27b26437fd40ca878d887f11d81245c2c6b
116+
{SHA512-CRYPT}$6$qAvxfQ2UbA1QTXSg$SB2aMEK76DBObt.KqTjF5.yDMceaD3dkG2UvrKQD0rZ9PKii/VAn.VS0nBsDqJX18kXieMi8AWJr0f7Ae9dAp/
115117
```
116118

117119
<!-- @include: include/reporting-bugs.inc -->

0 commit comments

Comments
 (0)