3 ms·

Because your password is part of your identity and is actually used to cross check during identity matching.

• ceejayoz 9y ago
  Leaving aside the fact that changing my password doesn't mean I have a new identity, having the hash $2y$10$/Aglzm2zpHO7m1dIv5vSp.GHPUd1D8uODn/jtBv3gpe8yS5e/D9PW doesn't tell you my password is "tinkerbell".
  • Ajedi32 9y ago
    If your password is "tinkerbell", even an attacker with very few resources can probably crack the hash for it in seconds on their desktop PC.
    • ceejayoz 9y ago
      My password is not "tinkerbell". It serves as an example. My real passwords look a lot more like the hash.
      • etrevino 9y ago
        Is your real password hunter2?
  • eveningcoffee 9y ago
    In these kind of checks nobody cares what your password is. Only if it is the same as you are using somewhere else. So hash, unless properly salted, works works very fine. Many people actually use a single password everywhere. Or at least for similar things.