4 ms·
>The hashed password cannot be converted/decrypted back to plain text - so the sanctity of your password is intact in case you use the same password for other s
by Buge 9y ago
>The hashed password cannot be converted/decrypted back to plain text - so the sanctity of your password is intact in case you use the same password for other services.
What? Hashed passwords can definitely be cracked for a significant percent of users.
- kirankuppa 9y agoIf they are simply hashed, rainbow tables can be used to crack them. Password must be salted preferably using bcrypt or something equivalent.
- Buge 9y agoA rainbow table is not necessary to crack passwords, and is not able to crack all passwords (even if not salted). And even if salted, a regular (non-rainbow table) attack will crack some passwords.
- Jackalopiate 9y agoThey state thatthey weresaltedin the blog post, however, they do not specify through what method.