Passwords are stored in the WHMCS database in encrypted format. Client passwords in WHMCS are stored with MD5 hashing + a salt, while product and server related passwords that need to be reversible are stored using a proprietary encryption algorithm. Admin passwords use bcrypt/SHA256-HMAC hashes depending upon PHP version. And Credit Card details are stored using AES 128 bit encryption.

Was this answer helpful? 153 Users Found This Useful (156 Votes)