Hello Olivier, you said that one justification for not encrypting passwords by default is: "As for the reason for cleartext passwords: once you switch to encrypted passwords you can't recover user passwords anymore . So enabling it is a choice, because there's no going back. We don't currently plan to make passwords encrypted by default." Well, what is that such a big trouble? Yes you cannot recover the password but it's trivial for the administrator to generate a new valid password and send it to the user. So if you really forgot what your password was, why is that such a big trouble to use a fresh new one you can choose? I'm sorry, but unless I missed something I don't understand the justification behind that. I strongly believe encrypting should be done by default. Look, in our daily consultant work, it's just too frequent one give ERP or database admin right to some third party consultant. Today that guy can always rip all the passwords of all companies employees and this potentially happening everywhere in the world where OpenERP is deployed. And since there is no third party auth like OpenID so people are just forced to use yet an other password so the chance the use one they already use is huge. So If you rip like 30 password per company and then test randomly on their GMail, Facebook or bank accounts, I'm sure their will be some positive match form time to time. So unless I missed some other reason, I just cannot understand that decision either. Do I miss something? On Wed, May 18, 2011 at 8:12 PM, Olivier Dony (OpenERP) <