• capybara@lemm.ee
    link
    fedilink
    English
    arrow-up
    2
    ·
    5 days ago

    Not how it works. You don’t attempt to guess the hashed password, you guess a password which then is hashed

    • Buddahriffic@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      5 days ago

      What’s stored is hash(password). Then the password check is stored == hash(entered).

      Hash(x) will be the same length, regardless of what x is. What that length is depends on which hash function it is. So the database can set the length of its storage for each user’s password to the length of the hash and the hash function will take any size password.