Hacker News new | ask | show | jobs
by GuiA 5135 days ago
Why isn't it acceptable to normalise the password and then hash it, compared to just hashing it?
1 comments

Because the search space for brute-forcing a password is massively reduced :). Suddenly, instead of having 62 possibilities per password character (assuming alphanumeric + no specials), there's only 36. Whereas a password like "PassWord123" might have gotten past a wordlist (well, that's unlikely, but...), "password123" certainly wouldn't.
Thanks!