When you have a password stored in a database that has been strongly hashed and salted does it really matter if the underlying user password is weak?
If you setup features like limiting login guessing and use captchas to stop automated guessing can you effectively make up for a weak password such as "
I guess my question is does using a password like "password" make the salted hash any weaker than using a longer password such as "
fish&*n0d1cTionaRYatt@ck"? - Are all salted hashes equally as secure or does it depend upon the password being a good one?