4 ms·
The password isn't leaked, a hash of the salted and peppered password is the only thing in the database (+ the salt, and the pepper elsewhere).
by bruce343434 2y ago
The password isn't leaked, a hash of the salted and peppered password is the only thing in the database (+ the salt, and the pepper elsewhere).
- cassianoleal 2y agoAssuming it's implemented that way. Which is a big assumption.
- bruce343434 2y agoAs the main post was written in the voice of a knowledgeable developer picking a login flow, I assumed so indeed.