Possible Duplicates:
Is using Gravatar a security risk?
Is Gravatar a privacy risk?

Since the Gravatar is generated based on the email address. Is it possible to determine a user's email address based on their Gravatar?

  • 1
    where is the duplicate question?
    – rubo77
    Commented Jun 19, 2012 at 16:01

1 Answer 1


The email addresses in Gravatar are stored as MD5 hashes. It's the same kind of one-way protection used in password storage.

  • 2
    But for avatars, the "password" might be much more easily guessed, and then validated against the hash. Like when assuming a display name might also be the user name at one of the main email providers.
    – Arjan
    Commented Feb 18, 2011 at 19:59
  • 11
    @chrisay It's only used for passwords by incompetent programmers, because brute-forcing md5 is fast. And for the same reason it sucks when hiding email addresses too. Commented Jan 28, 2012 at 16:54

Not the answer you're looking for? Browse other questions tagged .