4 ms·
Theoretically, they could have HAD the password in plaintext, then doubled it, salted it and hashed it in the new DB.
by temuze 12y ago
Theoretically, they could have HAD the password in plaintext, then doubled it, salted it and hashed it in the new DB.
- bengali3 12y agothis makes sense, as they also doubled(+2) the min password lengths. 18 char would be rather annoying to me though.
- kngspook 12y agoIMHO: It's not too annoying having a long password if you make it a sentence. It's when people try to get a single "word" up to 18 chars that it becomes annoying to type. A sentence is also nice because it's not too hard to work in a capital letter, lower case, and a symbol into the passphrase.