Tbh I think prehashing should always be done (though not even I do it in practise, especially when I push something through pbkdf2 anyway) It turns any passwor

Tbh I think prehashing should always be done (though not even I do it in practise, especially when I push something through pbkdf2 anyway) It turns any password into an equal size string which makes your password backend a lot more predictable in code (IMO).