EmpowerID provides an easy-to-use password management solution that allows end-users to securely reset forgotten passwords and unlock their user accounts. User-provided passwords are stored as non-reversible SHA-512 hashes, computed with a unique salt (unique per user and not accessible outside the system). These safeguards make it virtually impossible to reverse-discover a user's password, even if the stored hashed hash is inadvertently exposed. During authentication, the hash is computed with the user-supplied value (and system-supplied salt) and compared to what's stored; the user's password is considered valid if the hashes match. Safeguards are put in place to prevent brute-force attacks that attempt to guess a user's password.
...