[iKarim]

Quote:

Originally Posted by AmigaBlizzard Why would they run a script for days/weeks/months to crack a password when all other data is exposed at the same time?

Most people use a single password for everything, databases most likely contains users emails and passwords, if you don't hash your passwords, they could easily access the email accounts and start from there.

Saving passwords in plain text or similar methods is ABSOLUTELY terrible, thus you hash your users passwords. In the case of a breach, the harm won't be as much.