Passwords and hashing: why a good app can't tell you your own password

Lesson 2 of who are you: a well-built app doesn't store your password, so it literally can't email it back. What a hash is, why salt matters, and… Aliteq Sam Ortega · Build Editor

A safe app stores a one-way hash, never your actual password

It checks login by hashing your input and comparing hashes

A unique salt per user, plus a deliberately slow algorithm, is what makes a leaked database hard to crack

You shouldn't hand-roll this; a provider like Supabase Auth hashes and salts for you. The red flag to watch for: any app that can email you your existing password, or shows it in a settings screen,…

What this means for your app

Read the full story

Aliteq Passwords and hashing: why a good app can't tell you your own password Read the full story on Aliteq