Retrieving password when the password stored as a hash value
Can users request that their password be emailed to themselves if the password is stored as a hash value? Is there any way to convert a hash value to the clear text value with the proper information (& what information would you need)? If a user has the same password hash value stored on two sites, would their password be the same for both sites? If you're only storing a hash of the password, then no. ...and you should only be storing a properly-salted hash of their password, anyway. Password reset mechanisms are the proper alternative. Hashed passwords cannot be retrieved in general (this