It may come as a surprise, but YouTube doesn’t know your password. Facebook, Google, Twitter, none of them do. No decent website knows your password. It’s safer, that way a rouge employee or hacker can’t access your passcode. So how do the world’s most famous websites know when you sign in correctly? Super nerd Tom Scott explains in this new video.
1) that most “good” sites are only storing the hashed value of a password
2) why hashes are easy to compute one way, but difficult to reverse engineer
Some user comments on the video: