Hacker News new | ask | show | jobs
by tus666 699 days ago
> The passwords in phpBB3.3 use an exceptionally strong and secure method of encryption

I thought passwords were supposed to be hashed, not encrypted. This is bad.

1 comments

Some people use this term interchangeably. Many layperson's don't know the difference. Although yes, salted and hashed is the way. Encryption means there's a key (which can be compromised) to decrypt it.