As I design through some login forms, I began to wonder if passwords are stored in hashes, suppose that someone hacked into one website.
And suppose that users of that website use exactly the same passwords at other sites.
If so, using only hashes, is it possible to login into other websites?
Usually websites use random salts, so that even if your password is the same on two sites, different sites will store their hashes differently.
Even if websites didn’t use random salts, and passwords always hashed to the same thing, you’d still need to know the password before being able to login to those sites.