Adthena creates and uses secure autogenerated passwords that users of the application are unable to change themselves. By auto-generating these passwords we are able to create stronger, more secure passwords by default.
When required, passwords are created, encrypted and stored inside Adthena in a hashed and salted format. This is done using methodologies that comply with tests specified in FIPS 140-2, Security Requirements for Cryptographic Modules. Once created and encrypted these passwords are unable to be read by anyone within Adthena.
When a new password or password reset is required, this is auto-generated and emailed to the user. In addition to manual login, Adthena also supports SSO using OAuth2 and OpenID Connect. Communications between a user’s browser and Adthena is conducted via a secure HTTPS connection.