Basic cyber security says that passwords should be encrypted and hashed, so that even the company storing them doesn’t know what the password is. (When you log in, the site performs the same encrypting and hashing steps and compares the results) Otherwise if they are hacked, the attackers get access to all the passwords....
Good question. A lot of banks in Europe use this type of setup, where it will ask you for 3-4 characters of your pin/password, both to login and to confirm transactions. I always thought it was weird but never thought about the security implications.
What did you see?! (lemmy.world)
Know that feeling
The FTC wants to make it easier to cancel subscriptions just as streamer cancellations are peaking — read how Disney, Netflix, and more are pushing back (www.businessinsider.com)
cross-posted from: lemmy.zip/post/434525...
Is it possible to safely check for certain characters in a password?
Basic cyber security says that passwords should be encrypted and hashed, so that even the company storing them doesn’t know what the password is. (When you log in, the site performs the same encrypting and hashing steps and compares the results) Otherwise if they are hacked, the attackers get access to all the passwords....