3 ms·

Ouch! This means that they are storing your original password in plaintext somewhere, and that is definitely NOT best practices!

• loganfsmyth 12y ago
  Maybe it's only a hashed version of the characters? :P
• lappa 12y ago
  They may be storing the three characters as a hash separately, not that that is much better.
  • bitsutah 12y ago
    So I just need a pre-hashed table of all 80 possible single chars for a lookup table? That is worse than a hash of SSNs.
    • lappa 12y ago
      You check 3 characters, not 1, but like I said, 80^3 still isn't good.