# Password hash algorithm

**URL:** <https://meta.discourse.org/t/password-hash-algorithm/128608>\
**Category:** Development\
**Created:** [September 15, 2019, 12:17am UTC](https://meta.discourse.org/t/password-hash-algorithm/128608 "2019-09-15T00:17:22Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![csmu](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/csmu/32/124581_2.png) [@csmu](https://meta.discourse.org/u/csmu)\
**Post date:** [September 16, 2019, 12:19am UTC](https://meta.discourse.org/t/password-hash-algorithm/128608/7 "2019-09-16T00:19:53Z")

</div>

> [@pfaffman](#):
>
> unable to read the source

I am able to read the source once I find it. I went looking through the source - for user.password - and I concentrated mainly on  
the user\_controller. Nothing jumped out at me. I’d appreciate any pointers on where to look.

What would work for me for is to be able to validate a user / password through discourse without adding in a sso signin / login. Maybe through the api or a direct call to some ruby code.

---

_[View the full topic](https://meta.discourse.org/t/password-hash-algorithm/128608)._