What is a hashed password?

• A. A password stored in plain text for easy access
• B. A hash value stored instead of the actual password
• C. A password that is frequently changed
• D. A password combined with user information

Answer: (B)

A hashed password refers to the practice of storing a hash value instead of the actual password. When a password is hashed, it undergoes a one-way cryptographic transformation, which means that it is converted into a fixed-length string of characters that is unique to the original password. This transformation protects the password from being easily retrieved or understood by unauthorized users, even if they gain access to the database where the hash is stored.

The process of hashing is designed such that it is computationally infeasible to reverse the hash back into the original password, enhancing security. When a user attempts to log in, the provided password is hashed using the same algorithm, and the resulting hash is compared to the stored hash. If they match, the authentication is successful. This method adds a significant layer of security compared to storing passwords in plain text, as it minimizes the risk associated with data breaches.

In contrast, storing a password in plain text would allow anyone who gains access to the database to see the actual password, making it extremely insecure. Similarly, frequently changing a password does not necessarily mean it is hashed or secure, and combining a password with user information does not address the fundamental issue of securely storing the password itself.