For applicants · Security
How are my passwords stored?
Bcrypt hashed with a per-password salt. Plaintext is never stored.
Your password is hashed with bcrypt (cost factor 12) before being stored. Bcrypt is a deliberately-slow hashing algorithm designed to resist brute-force attacks even if the database is compromised.
We never store, log, or transmit your plaintext password. When you log in, we hash the password you typed and compare it to the stored hash — never the other direction.