living2xl
Elite Member
- Dec 9, 2011
- 1,968
- 530
because md5 is one way which is why its so secureHow can they match the correct hash code to the correct password? If they don't know the actual un-encrypted passwords and all they have are md5-s, then if I tell them I used password X in the past and I have changed my password 5 times in the last year, how can they match password X with the correct md5 between those 5 codes that they have? It doesn't make sense.
let's say your pass you entered is
Thunder
the md5 =
5c7686c0284e0875b26de99c1008e998
then they simply check if that string exists in the db where your 5 md5 hashes are stored
if its a match then you win
they dont need to know the actual unencrypted pass this way or even convert it