Skip to main content
unnecessary information removed
Source Link

I have a wordpress based website, a very important thing is that no one should get to know the email addresses of the people who will admin it because they will be from different companies and the information that they work together shouldn't be easily accessible.

I will make the whole website private but I am still thinking what else could I do. So I got the idea I could hash the emails in the db.

Has anyone done that?

What are the functionalities that need email address? As far as I know it is only needed when creating the user, because the password is sent to the user, and then it is needed at a password reset. So I would need to modify these so that it decrypts the email first.

Is there anything else? Do you think it's useless as a security measure?

I have a wordpress based website, a very important thing is that no one should get to know the email addresses of the people who will admin it because they will be from different companies and the information that they work together shouldn't be easily accessible.

I will make the whole website private but I am still thinking what else could I do. So I got the idea I could hash the emails in the db.

Has anyone done that?

What are the functionalities that need email address? As far as I know it is only needed when creating the user, because the password is sent to the user, and then it is needed at a password reset. So I would need to modify these so that it decrypts the email first.

Is there anything else? Do you think it's useless as a security measure?

I have a wordpress based website, a very important thing is that no one should get to know the email addresses of the people who will admin.

I will make the whole website private but I am still thinking what else could I do. So I got the idea I could hash the emails in the db.

Has anyone done that?

What are the functionalities that need email address? As far as I know it is only needed when creating the user, because the password is sent to the user, and then it is needed at a password reset. So I would need to modify these so that it decrypts the email first.

Is there anything else? Do you think it's useless as a security measure?

Source Link

Hash user emails in database?

I have a wordpress based website, a very important thing is that no one should get to know the email addresses of the people who will admin it because they will be from different companies and the information that they work together shouldn't be easily accessible.

I will make the whole website private but I am still thinking what else could I do. So I got the idea I could hash the emails in the db.

Has anyone done that?

What are the functionalities that need email address? As far as I know it is only needed when creating the user, because the password is sent to the user, and then it is needed at a password reset. So I would need to modify these so that it decrypts the email first.

Is there anything else? Do you think it's useless as a security measure?