1179
Passwords (lemmy.world)
submitted 3 years ago by to c/technology@lemmy.world
240 comments fedilink hide all child comments
 

We've all been there.

you are viewing a single comment's thread
view the rest of the comments
[–] 20 points 3 years ago (1 child)

You could store the passwords as hashes and just compare the hashed value.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 31 points 3 years ago (3 children)

    yes, but then they are not salted, which is what they should be doing.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 18 points 3 years ago

    True, but for the same big O they can salt the password for each user and compare it to what they have stored. My big pet peeve (that I've actually seen) is when they say your password is too similar to an old one. I have no idea how that could be reasonably done if they're storing your password correctly.

  • permalink
  • fedilink
  • source
  • parent