@@ -48,7 +48,8 @@ configuring Dovecot first, you can use `doveadm -O pw` to do so.
4848** -p** * password*
4949: The plain text * password* for which the hash should be generated. If
5050 no * password* was given [[ man,doveadm]] will prompt interactively
51- for one.
51+ for one. (Beware that using this option means the plain text password
52+ will be in your shell history!)
5253
5354** -r** * rounds*
5455: The password * scheme* s ** BLF-CRYPT** , ** SHA256-CRYPT** and
@@ -80,10 +81,10 @@ configuring Dovecot first, you can use `doveadm -O pw` to do so.
8081 specified, [[ man,doveadm]] will prompt interactively for one.
8182
8283** -u** * user*
83- : When the ** DIGEST-MD5** * scheme* is used, also the * user* name must
84+ : When the ** DIGEST-MD5** * scheme* is used, the * user* name must also
8485 be given, because the user name is a part of the generated hash. For
8586 more information about Digest-MD5 please read also
86- [[ link,auth_digest_md5]] .
87+ [[ link,auth_digest_md5]] . For other schemes, this is not required.
8788
8889** -V**
8990: When this option is given, the hashed password will be internally
@@ -92,26 +93,27 @@ configuring Dovecot first, you can use `doveadm -O pw` to do so.
9293
9394## EXAMPLE
9495
95- A DIGEST-MD5 hash for
[email protected] .
96+ An ARGON2ID hash (best security at time of this writing, though can be
97+ heavy on a busy server):
9698
9799``` sh
98- doveadm pw -s
digest-md5 -u [email protected] 100+ doveadm pw -s ARGON2ID
99101` ` ldas; l; als; las; lkas
100102```
101103Enter new password:
102104Retype new password:
103- {DIGEST-MD5}9b9dcb4466233a9307bbc33708dffda0
105+ {ARGON2ID}$argon2id$v=19$m=65536,t=3,p=1$AOrrkaFmGxCFtX+NCSHFkg$N3rlzYFqyNkCwrOingnDJ/qDQ09yGHgQa8PQfbu7rIE
104106```
105107
106- A CRAM-MD5 hash for [email protected] . 108+ Alternatively, a SHA512-CRYPT hash:
107109
108110```sh
109- doveadm pw
111+ doveadm pw -s SHA512-CRYPT
110112```
111113```
112114Enter new password:
113115Retype new password:
114- {CRAM-MD5}913331d8782236a8ecba7764a63aa27b26437fd40ca878d887f11d81245c2c6b
116+ {SHA512-CRYPT}$6$qAvxfQ2UbA1QTXSg$SB2aMEK76DBObt.KqTjF5.yDMceaD3dkG2UvrKQD0rZ9PKii/VAn.VS0nBsDqJX18kXieMi8AWJr0f7Ae9dAp/
115117```
116118
117119<!-- @include: include/reporting-bugs.inc -->
0 commit comments