That ensures that the password is never seen in plain text, at all. Of course, for the hashing to happen client-side, the client must own the instructions to do so, which means that an attacker will ...

It looks as though Facebook is in hot water once again today as it has been revealed up to 600 million Facebook users had their passwords stored in plain text on the social network’s internal servers ...