Playing with Hashing 02: Storing Hashed Passwords

In this video I discuss storing passwords in their hashed form and how easy it is to recover the original password given the hashed version (due to the existence of rainbow tables).
To be clear, storing hashed passwords is better than storing passwords in the clear. But using a weak/fast hashing algorithm (eg MD5, SHA1) is much worse than using a slow hash and salt.
The best preventative measure is to have a long and sufficiently complex password to avoid being present in rainbow tables.
See the XKCD on password strength xkcd.com/936/ , which is commonly recited on internet forums ;)
Thanks for watching!