RE: How To decrypt a Password Stan Rogers 21.Oct.05 01:11 AM a Web browser Domino Everyplace All ReleasesAll Platforms
You can't because it's not encrypted. Passwords never should be. It's hashed, and hashing is a one-way process. The original data is discarded during a hash. You can think of it as a sort of sophisticated checksum. @HashPassword is stronger than a mere hash, though, because it is "salted" -- that is, a value that has nothing to do with the original data is added into the mixture during the hash process. The best you can do is to guess at the password and run that guess through the same hash procedure until you get the same hash value. Note, though, that just because you got the same hash value doesn't mean you found the user's original password. You can still use the password you found, since it's the has and not the password that's used to authenticate, but if you were to, say, mail the working password to the user, he might be surprised.