I know you gotta store the passwords hashed but doesn’t that just move the goalposts? How come someone can’t use the hashed end result to get into the service it was used for?

    • sylver_dragon@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      13 hours ago

      Give it a try, it might be. I actually have no clue what my Lemmy password is. I just semi-randomly smooshed out 16 characters. I use KeePassXC as a password vault and I let it generate, store and usually type my passwords for me. I haven’t the slightest clue what most of them are and can’t be arsed to care. I did check the length of my password while typing up my comment, but other than mentally processing the number of characters, I wasn’t paying attention to it.