4 ms·
The article says: > never store passwords in plaintext It should say: > never store passwords in any form; store a hash of the password instead It's a commo
by facorreia 10y ago
The article says:
> never store passwords in plaintext
It should say:
> never store passwords in any form; store a hash of the password instead
It's a common mistake to confuse "password hash" with "encrypted password".
- Nomentatus 10y agoFor completeness, the point of this apt comment being that you don't want your employees or anyone else to be able to derive passwords en masse, so why leave that capability lying around; when a hash does everything that you require. (Some) hashes have also the advantage of masking the length of passwords.