Password hashing
Storing a one-way scrambled version of a password instead of the password itself.
Definition
Servers should never store or send plain passwords. Instead they store a hash, which can be checked but not reversed. A tester's clue that this is wrong: a "forgot password" email that contains your actual password.
In practice
Requesting a password reset sends a link to set a new password, never "Your password is Secret123!".
Learn it in context
Lessons that use this term.