4 ms·
> Your method forces storage of the password cleartext on the server which is strongly discouraged. Actually, no. There is no removing or replacing of charact
by est 15y ago
> Your method forces storage of the password cleartext on the server which is strongly discouraged.
Actually, no.
There is no removing or replacing of characters. You can restore password back on server. Then hash, match against hashed password.
- jzs 15y agoYea i just thought about it. As long as you re-arrange before comparing to the hash. My mistake.