[neutrin0]

You definitely need to tell somebody that they should be encrypting their passwords using something like Format Preserving Encryption. FPE https://www.tokenex.com/blog/format-preserving-encryption-an...