Multiple choice › Hashing passwords
Hashing passwords
1. Hashing passwords
Why are passwords stored as salted hashes rather than encrypted with a key?
- Hashes can be decrypted by administrators when needed
- A hash cannot feasibly be reversed, and a unique salt stops identical passwords having identical hashes
- Hashing makes the passwords shorter so the database is smaller
- Salting is only done to make hashing faster
Answer
B
Hashing is one way, so stolen hashes do not directly reveal passwords. Salt defeats precomputed (rainbow table) attacks.