You could store hashes of various small combinations, e.g. hash the 3rd, 5th and 6th characters and then test against that. Then nothing needs storing in plain

You could store hashes of various small combinations, e.g. hash the 3rd, 5th and 6th characters and then test against that. Then nothing needs storing in plain test. You don't even need to store the hash for the whole password either.