[mykii]

I talking about failsafe not fallback, U will never reach the condition on browsers or nodejs. This mimic is there just to avoid a null return from .password() (generaly not checked by user) which could be more dangerous.

[lawl]

Right because completely aborting would break things, who cares about security?

This is just horrible and I honestly hope nobody will ever use this, I'm sorry.