https://www.expressvpn.com/blog/how-websites-check-your-password/