• eronth@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    18 days ago

    I use that command partially because Microsoft accounts don’t allow passwords as long as the password I like to use for my PC

    • Buddahriffic@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      18 days ago

      Which suggests to me that MS stores plaintext passwords. Because a hash function doesn’t care about the length of what it’s hashing, the output will always be the same length, so they could verify a 300 character password with the same storage space as a 3 character password.