If someone managed to steal a database of credentials from Schwab, they could possibly decrypt the passwords (all these limitations clearly point to them not ha

If someone managed to steal a database of credentials from Schwab, they could possibly decrypt the passwords (all these limitations clearly point to them not hashing properly). If someone stole a database from a provider that implements passwords correctly, the best they could do is get some low-hanging fruit passwords.