4 ms·
You don't need to use tokens to not have passwords leaked. Hashing has existed for a very long time.
by Qwertie 8y ago
You don't need to use tokens to not have passwords leaked. Hashing has existed for a very long time.
- deleted 8y ago[deleted]
- torstenvl 8y agoThe parent post refers to access credentials held by third parties. Password hashing is of no use here unless Twitter/Facebook/whoever implemented an API that permitted you to submit a hash of the password, which they could not do unless they didn't salt their own hashes (or publicly revealed all the salts, which is effectively the same thing).