Every day we enter passwords on dozens of websites: checking work email, logging into an online bank account, or opening our favorite messenger. It seems that the logic is simple: you enter the password, the system checks it against what it knows about us, and lets us in. If the server simply saved your password in the form in which you typed it, digital security would have collapsed long ago.