[usconservative]

A proper web firm doesn’t store its users’ passwords and therefore cannot give them out.

So I guess it's magic anytime you type in your password on a website and it just works huh?

[zeugma]

A proper web firm doesn’t store its users’ passwords and therefore cannot give them out.

So I guess it's magic anytime you type in your password on a website and it just works huh?
 

No. It's not magic. It is a hash. If you are doing business with a company, and you forget your password, and their tech support line can actually give you your old password, run. Do not walk. Run away from them because they are absolutely violating very fundamental and elementary protocols. There is never a situation where they should be able to tell you what your password is.

This is pretty basic stuff, really.