# Is there a way to manually locate user's passwords?

**URL:** <https://meta.discourse.org/t/is-there-a-way-to-manually-locate-users-passwords/25492>\
**Category:** Product Support\
**Created:** [21 Febbraio 2015, 6:03pm UTC](https://meta.discourse.org/t/is-there-a-way-to-manually-locate-users-passwords/25492 "2015-02-21T18:03:23Z")\
**Posts on this page:** 1\
**Showing post:** 17

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [29 Settembre 2018, 4:32pm UTC](https://meta.discourse.org/t/is-there-a-way-to-manually-locate-users-passwords/25492/17 "2018-09-29T16:32:20Z")

</div>

> [@sam](#):
>
> On current computing hardware if the user picked a reasonable password you are probably looking at a few centuries of computer work.

Not exactly, minimum default password length today is 10 for regular users and 15 for staff. A weak 10 char password wouldn’t be terribly hard to break. See data at

> **[Hacker, Hack Thyself](https://blog.codinghorror.com/hacker-hack-thyself/)**
>
> We’ve read so many sad stories about communities that were fatally compromised or destroyed due to security exploits. We took that lesson to heart when we founded the Discourse project; we endeavor to build open source software that is secure and...

We still need to create a password hash version and ramp up the hash difficulty a fair bit before 2020.

---

_[View the full topic](https://meta.discourse.org/t/is-there-a-way-to-manually-locate-users-passwords/25492)._