Hacker News new | ask | show | jobs
by jaywalk 1575 days ago
The reason we can store and use password hashes is because the user provides their password every time they login. So we hash the password they provided at login and compare that to the hash that was stored.

We can't determine what their password is based on the hash alone, which is why we couldn't hash all the user data in the DB with their password and store that.