This question already has an answer here:
We live in a world where password reuse is common and most of the internet users are not using password managers, while hacks and breaches are becoming more common. The importance of those breaches lays not only in an access to the compromised website, but in a fact, that leaked passwords are commonly reused for social media, emails or bank account, and to access all kinds of vulnerable information which can cause havoc in one's life. The question is about benefits of client-side to the regular user, not the highly educated one.
Are there security benefits of client-side hashing, when combined with TSL, strong server side salted hashing and all other kinds of security measures?
I have read on multiple posts, that
client-side hashed password becomes the password.
ssl solves all problems during transportation
But I try to imagine a scenario when the password can never be read even by someone controlling the server.
But isn't there a benefit to not ever knowing the password, which might be weak or reused? Isn't it an additional layer of protection against malicious admins, leaked logs, or breaches like a recent one that happened to Cloudflare?
Or am I missing something that makes client-side hashing completely useless?