How NOT to Store Passwords! - Computerphile

The practical follow-up to the hashing video, and the one that makes sense of so many breach headlines. Tom Scott walks through the bad ways websites have kept passwords, from plain text upward, and lands on hashing with a salt, a random extra string added for each user so that two identical passwords no longer look the same in a stolen database. It runs just over nine minutes. Watch it and you will know what to ask when a supplier says your users' passwords are "encrypted", and why that word alone is not the reassuring answer.