No, why? The server will send down a hash function, a salt and its version of a password hash. Use something like bcrypt or PBKF2, reduce their output by foldi

No, why? The server will send down a hash function, a salt and its version of a password hash. Use something like bcrypt or PBKF2, reduce their output by folding or by funneling through something like CRC to mitigate the risk of brute-forcing. Alternatively, keep salt/hash on the server side and make the client ajax the current hash from the server.