mod_auth_internal_plain

An authentication provider that uses plaintext passwords in Prosody's configured data store. This was the default authentication provider in the past.

There is no special configuration for this provider.

Note that although passwords are stored in plaintext, the filesystem permissions in our packages prevent access to them from any user except prosody and root. Please see our comparison between the plain and hashed providers for more information.

Because passwords are stored in plain text, the plain profile can offer SCRAM with multiple hash functions. If you later switch to mod_auth_internal_hashed, only the SCRAM hash function selected by password_hash will be retained.

This may lead to some clients being locked out due to the apparent downgrade attack of one of the methods disappearing.

SASL profiles

This module provides the plain profile.