Password encryption is now forced, it can't be toggled off anymore. This was done due to the insecurity of storing passwords without any kind of security, which might have caused password leaks.
The encryption algorythm has been changed, too. The plugin now uses
Bcrypt to hash passwords.
No config changes are required for this update, the plugin will automatically encrypt previous passwords as players log in.
Also, a new optional configuration was added to the
passwords section, called
extraSalt, for incrementing the amount of salt rounds of the hashing algorythm.