3 ms·
They dont necessarily store your password in plain text, they could (and probably do) store each character of your password in a salted hash.
by TamDenholm 14y ago
They dont necessarily store your password in plain text, they could (and probably do) store each character of your password in a salted hash.
- jethroalias97 14y agoHashing each character doesn't provide any additional security. The main reason why we hash passwords in the first place is so if an attacker where to get read access, they couldn't deduce the password. But if they are looking in the database and see 15 or so fields of hashes, they can deduce any user's password in at most 256*15=3840 (assuming ascii) tries, which is trivial.