Hacker News new | ask | show | jobs
by strangestchild 4829 days ago
I think the point is that storing even encrypted passwords is not as safe as storing (salted) hashes, because if the database was compromised, the encryption key would likely be compromised as well. It's safer if even the site themselves do not know your password.

Technically, you are right to say that there's no evidence passwords are being stored in plaintext, but encrypted stores really aren't any better.