You should never think hashed passwords are safe by default. Your password strength is probably the strongest factor on whether or not they can crack it. Your “hunter2” password can get cracked in a second.
Well, no, but if they were plaintext it wouldn’t matter what they are. Regardless, I’m sure they are hashed and salted, and I’m not worried about my unique 64 character password being compromised by a dictionary attack.
Yeah you and the other 0.1% of users with strong, unique passwords are save.
I’m sure they are hashed and salted
I wouldn’t. I have seen enough password databases to know everything from cleartext, base64, md5, encrypted with a key stores in the same database, pbkdf2 to argon2id is used in real world applications.
You should never think hashed passwords are safe by default. Your password strength is probably the strongest factor on whether or not they can crack it. Your “hunter2” password can get cracked in a second.
Well, no, but if they were plaintext it wouldn’t matter what they are. Regardless, I’m sure they are hashed and salted, and I’m not worried about my unique 64 character password being compromised by a dictionary attack.
Yeah you and the other 0.1% of users with strong, unique passwords are save.
I wouldn’t. I have seen enough password databases to know everything from cleartext, base64, md5, encrypted with a key stores in the same database, pbkdf2 to argon2id is used in real world applications.