If he has the passwords, he could hash them and compare that against the entries in the DB. I think he's saying he didn't even have access to the DB of non-pla

If he has the passwords, he could hash them and compare that against the entries in the DB. I think he's saying he didn't even have access to the DB of non-plaintext passwords.