I have a wordpress based website, a very important thing is that no one should get to know the email addresses of the people who will admin.
I will make the whole website private but I am still thinking what else could I do. So I got the idea I could hash the emails in the db.
Has anyone done that?
What are the functionalities that need email address? As far as I know it is only needed when creating the user, because the password is sent to the user, and then it is needed at a password reset. So I would need to modify these so that it decrypts the email first.
Is there anything else? Do you think it's useless as a security measure?