Password Management

Passwords are high-risk because users reuse them, attackers target them, and leaked password hashes can be attacked offline for years.

A production system should never store plaintext passwords or use reversible encryption for normal login. It should store slow, salted, one-way password verifiers and compare login attempts against those verifiers.

This chapter covers how production systems store and verify passwords without keeping recoverable secrets.