tl;dr Probably unhashed or project manager. There is a very unlikely security scenario, where the hash of the password actually forms a dictionary word (or com

tl;dr Probably unhashed or project manager. There is a very unlikely security scenario, where the hash of the password actually forms a dictionary word (or combination of dictionary words). I did say it was very unlikely (astronomically so). And this only mitigates against this if the login form restricts your password to 32 chars. I'll vote with "inept project manager" or unhashed password. Not sure which worries me more. I would love to be an optimist, but the internet keeps proving me wrong.