4 ms·Better advice: have the client pre-hash the password before sending to the server.by notfed 9y agoBetter advice: have the client pre-hash the password before sending to the server.ovao 9y agoNote that without the server also performing hashing, this is essentially equivalent to storing plain-text passwords.notfed 9y agoI agree. Note that I didn't say only hash the password on the client side.