Do any employees (like system admins) at social media & e-commerce sites/online stores have access to users' passwords?

As a former admin of one of those many sites (a user forum in my case), I can tell you that admins do not have access to your passwords, unless the entire site is built by the provider from scratch (which no-one does). Every site uses several basic providers, like proboards, lefora, or other. All of those platforms provide standard user account management, including making sure passwords remain hidden, even to admins.

Admins can block, delete, reinstate accounts, they can set minimal specs for passwords (expiration dates for when it has to be renewed) etc, but they cannot see the actual password. While this may be different on a fully in-house developed site, I don't think there are any (big) sites that would allow their tech adminsto actually be able to look at passwords, Mahalo and Facebook included.

If the person has access to the database of the website means they have full access to the passwords too. Most of the webmasters would have access to the database as well. The passwords are encrypted and stored in database but can be decrypted easily by the webmasters.

Further they can change the password of the users.

Good question. It might be different for each site depending on what kind of software they use. I know from being an admin on a forum that we were able to reset a user's password but we could not see what it was.

As an admin to several of my own sites I don't have access to user passwords in the strict sense. I mean, I can't see the actual password characters. I do however have the ability to change a password or reset it.At work, because the information being retrieved is public information and there should be no personal usage of the system, and the user ID is work related, I do have access to passwords.

However, it is not a social media or e-commerce site.

It depends on the internal organization structure. Usually site admins have access to the user passwords because they are behind maintenance and update. But they only have user password access for internal customers (employees) not access external users (customers password).

Because they no need to access password, because all the user information they easily seen without password and able to modify or ban or deactivate user profile.

Ciao, depends on which site and what "clearance" level that employees has. In theory, if one is resourceful it could be found. But morally its not right.

However, the actual "founder" of the site can actually browse with that master file. But for most of the successful sites, this passwords browsing is so trivial...they would be busy with other pressing matters like improving the databases systems...etc...which becomes problematic once users reach a certain level.

I cant really gove you an answer,but what I can give you is a way to a solution, that is you have to find the anglde that you relate to or peaks your interest. A good paper is one that people get drawn into because it reaches them ln some way.As for me WW11 to me, I think of the holocaust and the effect it had on the survivors, their families and those who stood by and did nothing until it was too late.

Related Questions