Password security

[Dimpl]

While logged in, I am able to see my password in account info. This means one of two things: it is saved locally when I log in (which means that it saved in kong somewhere) or it is saved by the elements server. I believe this is insecure compared to saving the hashed password and comparing the two on login. Comments?

[serprex]

http://elementscommunity.org/forum/game-suggestions-and-feedback/don%27t-use-plaintext-passwords

When creating an account it says your email will only be used for if you forget your password. I'm unsure how one recovers their password if forgotten, but that could be used to verify one's password is stored in plaintext on the server. That said, you seem to be describing Kong related issues

[Dimpl]

I don't know how it works - it COULD be a kong issue, but I believe the second option is more likely.