This document discusses password security and storage for website owners. It recommends that websites should not store user passwords in plain text, but rather use hashing algorithms to store encrypted versions of passwords instead of the actual plaintext passwords. This helps protect users if the website's database is stolen, as the hashed passwords cannot be easily decrypted back to their plaintext versions. The document provides an example of hashing the password "hammer" and shows the encrypted hash value that should be stored instead of the plaintext password itself.

3. “We want to make you aware that
media of ours that contained a
backup of a portion of the reddit
database was stolen recently.
We wanted to alert you to the
possibility that your username,
password, and – in some cases
– e-mail address may have been
compromised.”
Steve Huffman, reddit.com

4. Lesson for site owners:
Don't store
passwords in
plain text

5. Do we really need
to know user's
passwords?