[GlennS]

If you do the hashing on the client side, then the hash itself effectively becomes the password.