5 ms·
Hashing each character doesn't provide any additional security. The main reason why we hash passwords in the first place is so if an attacker where to get read
by jethroalias97 14y ago
Hashing each character doesn't provide any additional security. The main reason why we hash passwords in the first place is so if an attacker where to get read access, they couldn't deduce the password. But if they are looking in the database and see 15 or so fields of hashes, they can deduce any user's password in at most 256*15=3840 (assuming ascii) tries, which is trivial.