Migrating crypt scheme with PostfixAdmin, dovecot and roundcube
14 minute read Published:
How to migrate from an old password crypt scheme to a better one.
This post is based on https://kaworu.ch/blog/2016/04/20/strong-crypt-scheme-with-dovecot-postfixadmin-and-roundcube/ with adjustments for my situation and updated links to the documentation. I use PostfixAdmin 3.3.15, Roundcube 1.6.11 and Dovecot Community Edition (CE) 2.4.1 .
When I was migrating from Debian
bookworm to
trixie, I noticed that Dovecot was
upgraded to version 2.4.1 and
because I had to enable the deprecated auth_allow_weak_schemes option, I
thought it would be a good idea to look at how to improve the security of the
passwords that are stored for my email setup.
On the documentation site for Dovecot CE there
is a nice page on Converting Password
Schemes
which pointed to the site where is post is based on.
Originally I choose to use the MD5-CRYPT scheme, because it was the most
universal supported scheme which was not plain text. Now it is time to move to
something more secure.