3 ms·

But you have. It means even if you refuse your passwords elsewhere, only the website that was compromised is compromised.

• rocqua 7y ago
  Really, that should be a salted hadh to really defend against password reuse.
• allset_ 7y ago
  You can (and should) store the salt server-side. Moving the hashing to the client does not solve anything.