3 ms·
so you just replaced the password with another secret, the hashed password. An attacker would now not need to gain access to the original password, but needs th
by Xylakant 10y ago
so you just replaced the password with another secret, the hashed password. An attacker would now not need to gain access to the original password, but needs the hashed password - which will be logged just like the PW.
The only security benefit is that it offers a bit of support for those that are reusing passwords since it doesn't expose the plain text.
- Filligree 10y agoMost people reuse passwords, so that isn't a trivial benefit.