Question about password encryption and verification of a password

[Udgnim]

Just curious

For password verification of an encrypted password, is it normal for the encrypted password to be decrypted then compared against the supplied password or is it normal for the supplied password to be encrypted then the resulting value is compared against the value of the original encrypted password?

Thanks.

 

[jvroig]

Passwords should not be encrypted. They should be hashed. Therefore, since decryption is not an option, the proper way to verify is to hash the supplied password, then see if it is the same hash as is stored.

On how to properly store passwords (hashing, not encrypting), see this post I made after the linkedIn hack.