When i create user from django-admin
user password\'s are encrypted .
but when i create user from django shell user-pasword is saved in plain text .
Example :
There are couple of way to set password for a django user object from django-shell.
user = User(username="django", password = "secret")
user.save()
This will store encrypted password.
user = User(username="django")
user.set_password("secret")
user.save()
This will store encrypted password.
But,
user = User(username="django")
user.password="secret"
user.save()
This will store plain text password. There is no hashing / encryptions applied since you are modifying the property directly.