09.08.2016, 03:50
Do not use two-way encryption, ever. You shouldn't be able to decrypt an encrypted string!
If you have a system that randomly generates a password, force them to make a new one the first time they want to log in. This newly created password should then override the randomly generated one.
If you have a system that randomly generates a password, force them to make a new one the first time they want to log in. This newly created password should then override the randomly generated one.