5 ms·
"In some cases, we may require you to change your password. (For example, if it’s commonly used or hasn’t been changed in a long time)" Commonly used? What do
by davidcollantes 14y ago
"In some cases, we may require you to change your password. (For example, if it’s commonly used or hasn’t been changed in a long time)"
Commonly used? What do they mean by that? Aren't they supposed not to know my password?
- podperson 14y agoGood question, but perhaps it's shorthand for "your password generates a hash matching that generated by passwords found in various stolen password lists in circulation".
- Jabbles 14y agoIn which case they're not hashing the password properly, they're likely checking the plaintext password as it's sent over HTTPS.
- deleted 14y ago[deleted]
- podperson 14y agoThey do not need to transmit plaintext passwords, they merely need to pick when and how to salt each password carefully. What they can't do is randomly salt each stored password.