3 ms·
I think parent is saying you can't have a login system where you store the hashed password locally and then log in by sending the hashed password to the server.
by wlesieutre 7y ago
I think parent is saying you can't have a login system where you store the hashed password locally and then log in by sending the hashed password to the server. The hashing to validate a password has to happen on the server, otherwise anyone could get a copy of your hashed password and submit it as a login.
But as other replies have pointed out, you can generate a login token to offer a "save password" feature without actually saving the password to disk.