>It implies that the system knows plaintext password No it doesn't, the password can be generated client side. I know that client side code is not safe, but th

>It implies that the system knows plaintext password No it doesn't, the password can be generated client side. I know that client side code is not safe, but the purpose here is to protect people who are not tech savvy enough to figure that out.