A cryptographic hash transforms a password into a random-looking value that is difficult to reverse. Store the hash instead of the plaintext password, so a database breach does not immediately reveal users’ passwords. section 8.3.2
Comparing password hashes
For a password such as SomePassword123, calculate H(password) during account creation and store the resulting password_hash. During login, hash the entered password again and authenticate when the result matches the stored value. section 8.3.2



