Do you develop on GitHub? You can keep using GitHub but automatically sync your GitHub releases to SourceForge quickly and easily with this tool so your projects have a backup location, and get your project in front of SourceForge's nearly 20 million monthly users. It takes less than a minute. Get new users downloading your project releases today!
I don't know if this is the case, but it may have something to do with translation.
I always thought "average" was equal to "mean", because they both translate to the same word in portuguese, which has the meaning of "mean".
Thanks for the clarifying post!:)
Maybe the keys could be generated from your password, in a very different manner from the hash used for authentication?
So they can keep the hash, but to generate the keys, they would have to retrieve your password from the hash first, and that could be made arbitrarily difficult.
I'm no security expert, just random thoughts here.