You should never think hashed passwords are safe by default. Your password strength is probably the strongest factor on whether or not they can crack it. Your "hunter2" password can get cracked in a second.
Well, no, but if they were plaintext it wouldn't matter what they are. Regardless, I'm sure they are hashed and salted, and I'm not worried about my unique 64 character password being compromised by a dictionary attack.
Yeah you and the other 0.1% of users with strong, unique passwords are save.
I'm sure they are hashed and salted
I wouldn't. I have seen enough password databases to know everything from cleartext, base64, md5, encrypted with a key stores in the same database, pbkdf2 to argon2id is used in real world applications.
I hate articles like this. Given I am 99% certain Steam will not be storing my password in a compromisable way, what is the point of changing it?
You should never think hashed passwords are safe by default. Your password strength is probably the strongest factor on whether or not they can crack it. Your "hunter2" password can get cracked in a second.
Well, no, but if they were plaintext it wouldn't matter what they are. Regardless, I'm sure they are hashed and salted, and I'm not worried about my unique 64 character password being compromised by a dictionary attack.
Yeah you and the other 0.1% of users with strong, unique passwords are save.
I wouldn't. I have seen enough password databases to know everything from cleartext, base64, md5, encrypted with a key stores in the same database, pbkdf2 to argon2id is used in real world applications.