Hello,

This is a request that both piwigo.org and the pigigo gallery software stop sending passwords in emails, and adopt modern methods of password management wherein passwords are *never stored anywhere*, but only cryptographic hashes of them, etc. so that in the event of a data breach everyone's password is not immediately compromised (this technique has been known since the 1970s, and to my knowledge is the only known safe technique).

For those not familiar with password hashing, here are some references:

  https://crackstation.net/hashing-security.htm

  http://blog.conviso.com.br/worst-and-be … d-storage/

(I just found these with a simple Google search).

Currently, the piwigo gallery software, immediately upon activation, sends an email to the administrator with the admin's password in plain text.  The piwigo.org forum registration does similarly.   This is a really bad practice because normal email is not secure; even if you aren't concerned about the NSA capturing your emails as they transit the Internet, your email provider stores your emails for an indefinite time, and if you aren't very careful your local email client (e.g. Thunderbird) will also store your "deleted" emails.  Any way you look at it, email is just the wrong place for sensitive information.  As noted above, there's really no safe place to store passwords as such, so they should never be stored (only the derived hashes).