Please could you let me know how secure the passwords are when members join a JomSocial site. I have noticed that the respondent is sent their password in 'Plain text' via email - but can I check that the passwords are not stored as plain text in the database? Are they encrypted / hashed?
password at database always encrypted / hashed. that depend with joomla it self. jomsocial running under joomla.
the email that containing password can be removed by using joomla language overrides or joomla settings. for more detail about it. you need active jomsocial license. jomsocial support staff will help you more.
