Security Policy

At Weblate, security maintains an environment that values the privacy of our users.

Weblate development follows the Best Practices of the Linux Foundation's Core Infrastructure Initiative.

Security FAQ

How are user passwords stored?

Hashed, currently using PBKDF2, HMAC and SHA-256 with 150000 iterations.

How to report a security issue?

The documentation has instructions on safe reporting.