Hacker News new | ask | show | jobs
by pafje 3011 days ago
From the article, the password is salted at least:

"I eventually found the sftkdb_passwordToKey() function that converts a [website] password into an encryption key by means of applying SHA-1 hashing to a string consisting of a random salt and your actual master password."