[f0urtyfive]

Who said the text persists, you could take it off the phone and type it in to compare against any existing salted hash. Still not good security, but not necessarily stored in plaintext.

[menssen]

(For the record, yes this is how it worked.)