2 ms·
Making a case-insensitive password checker is trivial if the passwords are being compared in plain text, but requires a bit of forethought if you do it with has
by mark-r 10y ago
Making a case-insensitive password checker is trivial if the passwords are being compared in plain text, but requires a bit of forethought if you do it with hashed passwords. In particular it's impossible to add this feature after the fact if you already have hashed mixed case passwords in your database. So the likelihood that passwords are unhashed goes way up.