Because the server doesn't store the password, only the "password hash" of the p...

SAI_Peregrinus on March 24, 2021 | parent | context | favorite | on: Substack's UI and 1Password temporarily cost me $2...

Because the server doesn't store the password, only the "password hash" of the password. So if the server isn't compromised during the login there's no way for the attacker to learn the password itself.