How passwords get cracked, in 3 small steps · part 3 of 3 · Hashing, salt and slow hashes
How do websites store your password?
Websites store a hash, a one-way blender, never your password. Stolen hash files are attacked offline, with no lockout, and rainbow tables crack matching hashes at once. Salt and slow hashes like bcrypt fight back.
What you turn: Hash speed and salt
The reel
The full lesson · 7:13
The long version
The same idea, slower: more examples, and pauses to try each step yourself.