What was the most used password in 2016?
Most offline attacks to compromise passwords in an enterprise are due to rainbow/dictionary attacks. Why can enterprises not simply protect the hashed password/salt information on the server side using encryption and decrypt the hashed password/salt during authentication?