Am I doing someting wrong?
I'm assuming I have SA2 - I have the latest SuperSuite running on DW CS6. I show Ecart 5.0.6 and databridge 1.0.3 (not sure which contains SA)
I've run through the whole process - create new username & pw, login, logout, request pw. The system emails me the following:
Password Information
Your username and password were requested from our website. They have been recovered and are listed below:
Username: j*****m
Password: testpass1
(I asterisked my username - the system sent it in full)
I can see that the password is being stored in the database hashed as requested, but it definitely seems like it's being decrypted and sent back to me.
Am I being obtuse? I don't mind it working this way - I just want to make sure my passwords are securely encrypted.