News for hackers. Stuff that matters.

A comment on Sites with dumb password rules. Parent comment

Re:Sites with dumb password rules by dorgo on Friday September 06, 2019 @09:18AM (#20895337)
afaik, passwords are not stored in databases. Only the hash of the password is stored. The database doesn't know and doesn't care about the length of the password.
[ Parent | on HN ]
Re:Sites with dumb password rules by joeframbach on Friday September 06, 2019 @09:44AM (#20895541)
A human has to do the work to turn the password string into a hash and store the hash. At some point in time (or now, even), it's probable that they ... didn't hash the password.
[ Parent | on HN ]
Re:Sites with dumb password rules by bryanrasmussen on Friday September 06, 2019 @10:56AM (#20896197)
Either the password or the hash of the password is stored, which it is depends on the age of the application, the skills of the developers and probably other factors that do not readily spring to mind.

However I am quite certain that not every solution has hashes of the password stored because every now and then I still get sites that tell me the password I chose has disallowed characters in it.

[ Parent | on HN ]