• @CrayonRosary
    link
    1
    edit-2
    8 months ago

    That’s not how it works. The code always has access to the submitted plaintext password. It’s salted and hashed after it’s verified for complexity. The complexity verification can even be done in JavaScript.