Question Plaintext Passwords?

[ict2842]

Does Plesk store passwords in plaintext - anywhere? Perhaps the table accounts in the psa database?

Going through, there are two passwords in plain text. I don't recognize the first of the two passwords; however, the second is one I entered.

 

[msmallet]

Well, if it does - then it is a clear backdoor for hackers. The general approach must be a hashed password - read here for example: Is it possible to decrypt hashed passwords displayed by the Plesk utility mail_auth_view utility

 

[Bitpalast]

Passwords are only stored encrypted and cannot be retrieved in plain text.
(false, sorry, does not apply to mailbox passwords)

 

[ChristophRo]

I beg to differ here
Email passwords are stored in a reversible manner and you can see them in plain text via the CLI command /usr/local/psa/admin/sbin/mail_auth_view

This is done, because Plesk still does need/want to support CRAM-MD5 authentication for mail clients. (POP/IMAP/SMTP)