4 ms·
They have your un-hashed password when the form is submitted, they can try all three, hash them, and compare those to the saved hash.
by karlshea 14y ago
They have your un-hashed password when the form is submitted, they can try all three, hash them, and compare those to the saved hash.