4 ms·

It's possible to check passwords in real time against the site.

• pavel_lishin 12y ago
  What do you mean?
  • morgante 12y ago
    If they ask for your password, an attacker can simply try to log in with it and then if it fails say "looks like that's not correct, could you try again Mr. Smith?"
    • pavel_lishin 12y ago
      If an alleged customer service rep straight-up asked me for my account password, I would 100% assume that I was being phished.